Code injection

2023-03-2818:15:00

PRIOn knowledge base

www.prio-n.com

cynet client agent

code injection

vulnerability

disable edr functions

process privilege tokens

security

4.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Cynet Client Agent v4.6.0.8010 allows attackers with Administrator rights to disable the EDR functions by disabling process privilege tokens.

CPENameOperatorVersion
client_agenteq4.6.0.8010

CPE	Name	Operator	Version
	client_agent	eq	4.6.0.8010

References

github.com/advisories/GHSA-hmjw-7429-p2vc

github.com/NF-Security-Team/CVEs/blob/main/CVE-Cynet/Readme.md