CVE-2024-6973 | Severity.io

Description

Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34.

Related CPE's

Vulnerable

References

ExploitVendor Advisory

Weaknesses

Primary

NVD-CWE-noinfo

Secondary

CWE-20

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 · High

Information

Source identifier

2505284f-8ffb-486c-bf60-e19c1097a90b

Vulnerability status

Analyzed

Published

2024-07-31T17:15:11.153

4 months ago

Last modified

2024-08-27T15:34:18.620

3 months ago