CVE-2024-6975

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-6975
Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.0 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://support.catonetworks.com/hc/en-us/articles/19758025406621-CVE-2024-6975-Windows-SDP-Client-Local-Privilege-Escalation-via-openssl-configuration-file Exploit Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:catonetworks:cato_client:*:*:*:*:*:windows:*:*
History

27 Aug 2024, 15:40

Type Values Removed Values Added
First Time Catonetworks cato Client
Catonetworks
CPE cpe:2.3:a:catonetworks:cato_client:*:*:*:*:*:windows:*:*
References () https://support.catonetworks.com/hc/en-us/articles/19758025406621-CVE-2024-6975-Windows-SDP-Client-Local-Privilege-Escalation-via-openssl-configuration-file - () https://support.catonetworks.com/hc/en-us/articles/19758025406621-CVE-2024-6975-Windows-SDP-Client-Local-Privilege-Escalation-via-openssl-configuration-file - Exploit, Vendor Advisory

01 Aug 2024, 09:15

Type Values Removed Values Added
Summary
  • (es) Escalada de privilegios locales del cliente SDP de Cato Networks Windows SDP a través del archivo de configuración openssl. Este problema afecta a SDP Client anterior a la versión 5.10.34.
Summary (en) Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration fileThis issue affects SDP Client before 5.10.34. (en) Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34.

31 Jul 2024, 20:15

Type Values Removed Values Added
Summary (en) Untrusted Search Path vulnerability in Cato Networks SDP Client on Windows allows Privilege Escalation.This issue affects SDP Client: before 5.10.34. (en) Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration fileThis issue affects SDP Client before 5.10.34.

31 Jul 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-31 17:15

Updated : 2024-08-27 15:40

NVD link : CVE-2024-6975

Mitre link : CVE-2024-6975

CVE.ORG link : CVE-2024-6975

JSON object : View

Products Affected

catonetworks

  • cato_client
CWE
CWE-426

Untrusted Search Path