Lucene search
+L

18 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 6:33 a.m.•13 views

CVE-2024-46465

By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of CRYHOD has to be modified to prevent this vulnerability...

7.8CVSS7AI score0.00158EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:29 a.m.•21 views

CVE-2023-50443

Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 ANSSI qualification submission or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are open...

4.6CVSS7AI score0.00318EPSS
SaveExploits0
OSV
OSV
•added 2024/11/15 6:15 p.m.•10 views

CVE-2024-46465

By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of CRYHOD has to be modified to prevent this vulnerability...

7.8CVSS5.7AI score0.00158EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/15 6:15 p.m.•31 views

CVE-2024-46465

By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of CRYHOD has to be modified to prevent this vulnerability...

7.8CVSS0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•14 views

PRIMX CRYHOD 安全漏洞

PRIMX CRYHOD is a PRIMX company used to enable companies to protect employee devices taken off premises in accordance with global management policies. A security vulnerability exists in PRIMX CRYHOD 2024.3 and earlier versions, which stems from the fact that by default dedicated folders can be...

7.8CVSS6.7AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/15 12:00 a.m.•30 views

CVE-2024-46465

By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of CRYHOD has to be modified to prevent this vulnerability...

0.00158EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/15 12:00 a.m.•14 views

CVE-2024-46465

By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of CRYHOD has to be modified to prevent this vulnerability...

7.2AI score0.00158EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/15 12:00 a.m.•76 views

CVE-2024-46465

The PRIMX CRYHOD software for Windows, version 2024.3 and earlier , contains a security vulnerability where dedicated folders are accessible by other users by default. This flaw allows for the misuse of technical files to perform tasks with higher privileges . Remediation requires modifying the C...

7.8CVSS6.9AI score0.00158EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/15 12:00 a.m.•2 views

PT-2024-31999

Name of the Vulnerable Software and Affected Versions CRYHOD for Windows versions up to 2024.3 Description The issue allows other users to access dedicated folders of CRYHOD for Windows by default, potentially misusing technical files and making them perform tasks with higher privileges...

7.8CVSS5.6AI score0.00158EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•2 views

CVE-2024-46465: Incorrect Default Permissions

By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of CRYHOD has to be modified to prevent this vulnerability...

7.8CVSS5.6AI score0.00158EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/13 9:15 p.m.•13 views

CVE-2023-50443

Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 ANSSI qualification submission or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are open...

4.6CVSS5.8AI score0.00318EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/12/13 9:15 p.m.•8 views

CVE-2023-50443

Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 ANSSI qualification submission or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are open...

4.6CVSS5.8AI score0.00318EPSS
SaveExploits0References3
Prion
Prion
•added 2023/12/13 9:15 p.m.•39 views

Design/Logic Flaw

Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 ANSSI qualification submission or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are open...

2.1CVSS7.3AI score0.00318EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/12/13 12:00 a.m.•17 views

PRIMX CRYHOD Security Vulnerability

PRIMX CRYHOD for Windows Q.2020.4, CRYHOD for Windows Q.2023.5, and CRYHOD for Windows Q.2023.5 are used by PRIMX to enable companies to protect employee devices taken off premises in accordance with global management policies. A security vulnerability exists in PRIMX CRYHOD for Windows versions...

4.6CVSS6.9AI score0.00318EPSS
SaveExploits0References3
CVE
CVE
•added 2023/12/13 12:00 a.m.•101 views

CVE-2023-50443

CVE-2023-50443 affects PRIMX CRYHOD for Windows (versions prior to Q.2020.4 and prior to 2023.5). Root cause: an unauthenticated attacker can modify encrypted disks to inject a UNC reference, causing the host to initiate outbound network traffic when such disks are opened. Impact is outbound traf...

4.6CVSS4.8AI score0.00318EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/12/13 12:00 a.m.•47 views

CVE-2023-50443

Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 ANSSI qualification submission or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are open...

5.1AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/13 12:00 a.m.•19 views

PT-2023-31551 · Primx · Primx Cryhod For Windows

Name of the Vulnerable Software and Affected Versions: PRIMX CRYHOD for Windows versions prior to Q.2020.4 PRIMX CRYHOD for Windows versions prior to 2023.5 Description: Encrypted disks created by PRIMX CRYHOD for Windows can be modified by an unauthenticated attacker to include a UNC reference,...

4.6CVSS4.8AI score0.00318EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/13 12:00 a.m.•7 views

CVE-2023-50443: Undefined Security Weakness

Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 ANSSI qualification submission or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are open...

4.6CVSS5.6AI score0.00318EPSS
SaveExploits0References1
Rows per page
Query Builder