8 matches found
CVE-2019-7487
Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution...
EUVD-2019-17029
Malware in sbrugna...
CVE-2019-7487
Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution...
Remote code execution
Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution...
CVE-2019-7487
CVE-2019-7487 affects SonicOS SSLVPN NACagent 3.5 for Windows. The issue stems from an unquoted autorun/service path, allowing a malicious binary within the parent directory to trigger code execution. Multiple sources reiterate that installation creates an unquoted path which can be exploited loc...
CVE-2019-7487: Unquoted Search Path or Element
Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution...
PT-2019-18628
Name of the Vulnerable Software and Affected Versions SonicOS SSLVPN NACagent version 3.5 Description The issue arises during the installation of the SonicOS SSLVPN NACagent on the Windows operating system. An autorun value is created without quotes around the path, which could allow a malicious...
SonicOS SSLVPN NACAgent 3.5 windows binary is vulnerable to Unquoted Service Path Privilege Escalation vulnerability
Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution. CVE: CVE-2019-7487 Last updated: Dec. 18, 2019, 10:11 p.m...