Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-60550
HistoryJul 16, 2021 - 12:00 a.m.

Zscaler Client Connector Buffer Overflow Vulnerability

2021-07-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.004 Low

EPSS

Percentile

73.2%

Zscaler Client Connector is an application for zscaler. An application installed on an appliance that ensures that Internet traffic and access to an organization’s internal applications is secure and compliant with the organization’s policies, even when not on the corporate network.A security vulnerability exists in versions of the Zscaler Client Connector prior to 2.1.2.74 for Windows, which stems from a vulnerability in the Client Connector when connecting to a misconfigured A stack-based buffer overflow exists when the client connector connects to a misconfigured TLS server. An attacker may be able to execute arbitrary code with system privileges.

CPENameOperatorVersion
zscaler client connector <2.eq1.2.74

0.004 Low

EPSS

Percentile

73.2%

Related for CNVD-2021-60550