CVE-2023-39374

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

Design/Logic Flaw

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

CVE-2023-39374 ForeScout NAC SecureConnector – CWE-427: Uncontrolled Search Path Element

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

CVE-2023-39374 ForeScout NAC SecureConnector – CWE-427: Uncontrolled Search Path Element

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element...

CVE-2023-39374

CVE-2023-39374 affects ForeScout NAC SecureConnector 11.2. The issue is described as CWE-427: Uncontrolled Search Path Element, attributed to an uncontrolled search path element in the affected software. According to NVD/NVD-derived metrics, the vulnerability is rated CVSS v3.1 base score 7.8 (HI...

ForeScout SecureConnector Code Issue Vulnerability

Forescout ForeScout SecureConnector is a network security software from Forescout, Inc. that authenticates machines attempting to join a network. A code issue vulnerability exists in ForeScout SecureConnector version 11.2 that stems from the presence of uncontrolled search path elements...

PT-2023-26903 · Forescout · Forescout Secureconnector

Name of the Vulnerable Software and Affected Versions: ForeScout NAC SecureConnector version 11.2 Description: The issue is related to an uncontrolled search path element, which is a type of security weakness. This weakness can potentially be exploited, although specific details about real-world...

Unspecified Vulnerability in ForeScout SecureConnector

ForeScout SecureConnector is a network security software from US-based ForeScout that authenticates machines trying to join a network. A security vulnerability exists in ForeScout SecureConnector, which can be exploited by an attacker to cause a buffer overflow and overwrite a stack cookie,...

CVE-2021-36724

ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to...

Buffer overflow

ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to...

CVE-2021-36724 ForeScout - SecureConnector Local Service DoS

ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to...

CVE-2021-36724

CVE-2021-36724 affects ForeScout SecureConnector Local Service. The vulnerability arises when a low-privileged user writes a large amount of characters to the installationPath, causing a buffer overflow and overwriting a stack cookie, which leads to the service crashing (DoS). Digital references ...

ForeScout SecureConnector 安全漏洞

ForeScout SecureConnector is a network security software from US-based ForeScout that authenticates machines trying to join a network. A security vulnerability exists in ForeScout SecureConnector, which can be exploited by an attacker to cause a buffer overflow and overwrite a stack cookie,...

CVE-2021-36724

ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to...

CVE-2021-28098

An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and writes logs entries to a file in %PROGRAMDATA%\ForeScout SecureConnector\ that has full permissions...

Privilege escalation

An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and writes logs entries to a file in %PROGRAMDATA%\ForeScout SecureConnector\ that has full permissions...

CVE-2021-28098

An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and writes logs entries to a file in %PROGRAMDATA%\ForeScout SecureConnector\ that has full permissions...

CVE-2021-28098

Forescout CounterACT

CVE-2016-9485

On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality of the agent. The typical configuration is for the agent to run as a Windows service under the local SYSTEM account. The SecureConnector...

CVE-2016-9486

On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality of the agent. The typical configuration is for the agent to run as a Windows service under the local SYSTEM account. The SecureConnector...