Unscored CVE-2023-28872 EUVD-2023-32492GHSA-868h-653q-w2q2

Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a s…

Published Dec 25, 2023 · Updated Aug 27, 2024 · Assigned by mitre

Description

Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\NcpSupport* location.

Advisories 1

WID-SEC-2024-0016 NCP Secure Enterprise Client: Schwachstelle ermöglicht Privilegieneskalation und Codeausführung BSI CERT-Bund (WID) · Jan 10, 2024

References

https://herolab.usd.de/en/security-advisories/usd-2022-0006/