PT-2024-20661 · Check Point · Harmony Endpoint Security Client For Windows

Alain Rödel + 1 · Published 2024-05-01 · Updated 2025-02-12 · CVE-2024-24912

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Harmony Endpoint Security Client for Windows versions E88.10 and below

Description A local privilege escalation issue has been identified. To exploit this issue, an attacker must first obtain the ability to execute local privileged code on the target system.

Recommendations For Harmony Endpoint Security Client for Windows versions E88.10 and below, update to a version above E88.10 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2024-24912

Affected Products

Harmony Endpoint Security Client For Windows

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-24912 · Security Note
• https://support.checkpoint.com/results/sk/sk182244 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-24912 · Vendor Advisory
• https://twitter.com/CVEnew/status/1785674681111953743 · Twitter Post
• https://twitter.com/Neodyme/status/1889693177415684356 · Twitter Post
• https://t.me/cvenotify/78703 · Telegram Post