PT-2024-26381 · Cylance · Cylanceoptics

M. Engleitner + 2 · Published 2024-08-20 · Updated 2024-08-21 · CVE-2024-35214

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions CylanceOPTICS for Windows versions 3.2 and 3.3

Description A tampering vulnerability in the CylanceOPTICS Windows Installer Package could allow an attacker to potentially uninstall CylanceOPTICS from a system, thereby leaving it with only the protection of CylancePROTECT.

Recommendations For versions 3.2 and 3.3, consider temporarily restricting access to the CylanceOPTICS Windows Installer Package to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2024-35214

Affected Products

Cylanceoptics

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-35214 · Security Note
• https://twitter.com/CVEnew/status/1825950680688820294 · Twitter Post
• http://seclists.org/fulldisclosure/2024/Sep/52 · Note
• https://twitter.com/VulmonFeeds/status/1825996663770493383 · Twitter Post
• https://t.me/cvedetector/3676 · Telegram Post
• https://t.me/cvenotify/91493 · Telegram Post
• https://support.blackberry.com/pkb/s/article/140080 · Note