Lucene search

INCDCVE-2021-36724

HistoryDec 29, 2021 - 6:15 p.m.

CVE-2021-36724

2021-12-2918:15:07

CWE-120

INCD

web.nvd.nist.gov

cve-2021-36724

forescout

secureconnector

local service

dos

buffer overflow

stack cookie

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

AI Score

5.6

Confidence

High

EPSS

Percentile

12.6%

JSON

ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn’t have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to crash.

Affected configurations

Nvd

Node

forescoutsecureconnectorMatch11.0.4.1024

VendorProductVersionCPE
forescoutsecureconnector11.0.4.1024cpe:2.3:a:forescout:secureconnector:11.0.4.1024:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
forescout	secureconnector	11.0.4.1024	cpe:2.3:a:forescout:secureconnector:11.0.4.1024:::::::*

CNA Affected

[
  {
    "product": "eServices / eNvoice",
    "vendor": "ForeScout",
    "versions": [
      {
        "status": "affected",
        "version": "SecureConnector 11.0.4.1024"
      }
    ]
  }
]

References

www.gov.il/en/departments/faq/cve_advisories

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

AI Score

5.6

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-36724