Critical · 9.8 CVE-2024-29500 EUVD-2024-26504GHSA-4fv8-fm6j-xc9r

An issue in the kiosk mode of Secure Lockdown Multi Application Edition v2.00.219 allows attackers to execute arbitrary code via running a …

Published Apr 10, 2024 · Updated Apr 16, 2025 · Assigned by mitre

Description

An issue in the kiosk mode of Secure Lockdown Multi Application Edition v2.00.219 allows attackers to execute arbitrary code via running a ClickOnce application instance.

References

https://www.drive-byte.de/en/blog/inteset-bugs-and-hardening
https://raeph123.github.io/BlogPosts/inteset/Inteset_Secure_Lockdown_Multi_Application_Edition_-_Vulnerabilities_and_Hardening_Measures_en.html