Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-36724 EUVD-2021-23317GHSA-cvrj-cr4m-fg2f

ForeScout - SecureConnector Local Service DoS

Published Dec 29, 2021 · Updated Sep 16, 2024 · Assigned by INCD

Description

ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to crash.

Affected products

VendorProductAffectedFixed
ForeScout eServices / eNvoice SecureConnector 11.0.4.1024 —

References