Skip to content
OpenAdvisories

Vendor

OSSEC

1 known vulnerabilities.

Products

OSSEC-HIDS Agent 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.5
    CVE-2024-1244

    Remote code execution and local privilege escalation due to UNC access and NetNTLMv2 hash theft

    Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the le…

    OSSEC OSSEC-HIDS Agent