Skip to content
OpenAdvisories
Medium WID-SEC-2023-3092 4 CVEs

NCP Secure Enterprise Client: Mehrere Schwachstellen

Published Dec 10, 2023 · Updated Jan 15, 2024 · Revision 3 · de-DE

Vendor: NCP Product: Secure Enterprise Client < 13.10 Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in NCP Secure Enterprise Client ausnutzen, um Dateien zu manipulieren und Informationen offenzulegen

Product

Der Secure Enterprise Client von NCP ist ein VPN-Client mit zentraler Administration.

Vulnerabilities 4

  • Unscored —
    CVE-2023-28868

    Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operat…

  • Unscored —
    CVE-2023-28869

    Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on…

  • Unscored —
    CVE-2023-28870

    Insecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow attackers to write to…

  • Unscored —
    CVE-2023-28871

    Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the ope…

Revision history

  1. #3

    Produktversion angepasst

  2. #2

    Korrektur: Nur Windows-Installation sind betroffen

  3. #1

    Initiale Fassung

References