LetsDefend SA Event ID: 263, SOC287 — Arbitrary File Read on Checkpoint Security Gateway…
Tags
country: China Hong Kong
attack-pattern: Data Ip Addresses - T1590.005 Server - T1583.004 Server - T1584.004 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID 3ce36e40-fd07-4f33-a956-8d0b7a43bfad
Fingerprint 2d85f589f8f38480
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 25, 2024, 8:53 p.m.
Added to db Sept. 25, 2024, 11:33 p.m.
Last updated Nov. 11, 2024, 7:26 a.m.
Headline LetsDefend SA Event ID: 263, SOC287 — Arbitrary File Read on Checkpoint Security Gateway [CVE-2024–24919]
Title LetsDefend SA Event ID: 263, SOC287 — Arbitrary File Read on Checkpoint Security Gateway…
Detected Hints/Tags/Attributes 23/2/3
Source URLs
Redirection Url
Details Source https://medium.com/@abalonpsalmer/letsdefend-sa-event-id-263-soc287-arbitrary-file-read-on-checkpoint-security-gateway-a0bcb46a227b?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 20 
cve-2024-24919
Details IPv4 3 
172.16.20.146
Details IPv4 2 
203.160.68.13