PT-2024-38014 · Cato Networks · Cato Networks Windows Sdp Client

Amberwolf · Published 2024-07-31 · Updated 2024-08-27 · CVE-2024-6975

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cato Networks Windows SDP Client versions prior to 5.10.34

Description The issue is related to a local privilege escalation vulnerability in the Cato Networks Windows SDP Client via the openssl configuration file.

Recommendations For versions prior to 5.10.34, update to version 5.10.34 or later to resolve the issue.

Exploit

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2024-6975

Affected Products

Cato Networks Windows Sdp Client

References · 6

• 🔥 https://support.catonetworks.com/hc/en-us/articles/19758025406621-CVE-2024-6975-Windows-SDP-Client-Local-Privilege-Escalation-via-openssl-configuration-file · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-6975 · Security Note
• https://osv.dev/vulnerability/CVE-2024-6975 · Vendor Advisory
• https://t.me/cvedetector/2158 · Telegram Post
• https://t.me/cvenotify/88094 · Telegram Post
• https://t.me/cvenotify/88187 · Telegram Post