PT-2025-33116 · Netskope · Netskope Client

Published 2025-08-14 · Updated 2025-08-15 · CVE-2024-7402

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions: Netskope Client (affected versions not specified)

Description: A malicious insider with administrative privileges can potentially tamper with the Netskope Client configuration by performing a Man-in-the-Middle (MITM) attack on the Netskope Client communication channel. Successful exploitation could result in temporarily altering the configuration of the Netskope Client or permanently disabling or removing the agent from the machine.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-354

Related Identifiers

CVE-2024-7402

Affected Products

Netskope Client

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-7402 · Security Note
• https://t.me/cveNotify/132441 · Telegram Post
• https://netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2024-002 · Note
• https://t.me/CVEtracker/29958 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1955887536758259897 · Twitter Post
• https://twitter.com/CVEnew/status/1955900286285046061 · Twitter Post
• https://t.me/cveNotify/132197 · Telegram Post