Remote Code Execution Vulnerability in Endpoint Protector and Unify Agent
CVE-2024-36074

7.2HIGH

Key Information:

Vendor

Netwrix

Status
CoSoSys Endpoint Protector and Unify
Vendor
CVE Published:
27 June 2024

What is CVE-2024-36074?

The CoSoSys Endpoint Protector up to version 5.9.3 and CoSoSys Unify up to version 7.0.6 are vulnerable to a remote code execution flaw due to improper handling of the EasyLock dependency. An attacker with administrative access can exploit this vulnerability to direct a client to download and execute a malicious file from the server, potentially leading to severe security breaches.

References

https://helpcenter.netwrix.com/bundle/z-kb-articles-sales...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.