PT-2023-21029 · Cynet · Cynet Client Agent

Published 2023-03-28 · Updated 2025-02-18 · CVE-2023-27247

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cynet Client Agent version 4.6.0.8010

Description The issue allows attackers with Administrator rights to disable the EDR functions by disabling process privilege tokens.

Recommendations For Cynet Client Agent version 4.6.0.8010, consider restricting Administrator rights to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the process privilege tokens in the affected functions until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2023-27247

GHSA-HMJW-7429-P2VC

Affected Products

Cynet Client Agent

References · 7

• 🔥 https://github.com/NF-Security-Team/CVEs/blob/main/CVE-Cynet/Readme.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-27247 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-27247 · Security Note
• https://t.me/cibsecurity/60908 · Telegram Post
• https://t.me/cvenotify/47028 · Telegram Post
• https://github.com/advisories/GHSA-hmjw-7429-p2vc · Note
• https://t.me/cvenotify/111682 · Telegram Post