Local Privilege Escalation Vulnerability in Cato Networks Windows SDP Client

CVE-2024-6978

What is CVE-2024-6978?

A significant vulnerability has been identified in the Cato Networks Windows SDP Client, where low-privileged users can install local root certificates without sufficient access controls. This flaw poses a serious risk, as it allows malicious users to undermine the integrity of secure communications and potentially intercept sensitive data. Affected versions include all Windows SDP Client versions released before 5.10.28. It is crucial for organizations using this product to promptly update to the latest version to mitigate the risk of exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References