PT-2024-39961 · Forescout · Forescout Secureconnector

Published 2024-10-23 · Updated 2025-10-09 · CVE-2024-9949

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Forescout SecureConnector version 11.1.02.1019

Description The issue allows an unprivileged user to corrupt the configuration file, resulting in a Denial of Service in the application.

Recommendations For version 11.1.02.1019, update to a newer version that contains a fix for this issue to prevent corruption of the configuration file and subsequent Denial of Service.

Fix

DoS

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2024-9949

Affected Products

Forescout Secureconnector

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-9949 · Security Note
• https://forescout.my.site.com/support/s/article/High-Severity-Vulnerability-in-Secure-Connector-HPS-Inspection-Engine-v11-3-5-and-lower · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-9949 · Vendor Advisory
• https://t.me/cvedetector/8745 · Telegram Post
• https://t.me/cveNotify/137995 · Telegram Post