CVE-2023-28868

The vulnerability CVE-2023-28868 affects NCP Secure Enterprise Client, specifically the Support Assistant component, and exists in versions prior to 12.22. The root cause is a flaw in the Support Assistant that enables an attacker to delete arbitrary files on the operating system by abusing symbo...

CVE-2023-28869

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link...

CVE-2023-28869

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link...

NCP Secure Enterprise Client Security Vulnerability

NCP Secure Enterprise Client is a VPN Virtual Private Network client application from NCP Germany. A security vulnerability exists in NCP Secure Enterprise Client versions prior to 12.22 that originates from a vulnerability that allows an attacker to delete arbitrary files on the operating system...

CVE-2023-28869

The CVE affects NCP Secure Enterprise Client, specifically versions prior to 12.22, where the Support Assistant feature can be abused to read arbitrary files by creating a symbolic link. The underlying issue is tied to the Support Assistant component in the client, enabling an attacker with netwo...

CVE-2023-28870

CVE-2023-28870 affects the NCP Secure Enterprise Client (Support Assistant) prior to version 12.22. The vulnerability stems from insecure file permissions that allow low-privileged users to write to configuration files, enabling potential manipulation of client configuration. Exploitation details...

PT-2023-22018 · Ncp · Ncp Secure Enterprise Client

Name of the Vulnerable Software and Affected Versions: NCP Secure Enterprise Client versions prior to 12.22 Description: The issue allows attackers to read the contents of arbitrary files on the operating system by creating a symbolic link. This is related to the Support Assistant in the NCP Secu...

CVE-2020-11474

NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant...

Code injection

NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant...

CVE-2020-11474

NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant...

CVE-2020-11474

CVE-2020-11474 affects NCP Secure Enterprise Client prior to 10.15 r47589. Description: a symbolic link attack on enumusb.reg via Support Assistant. The records indicate local access threat with low attack complexity and no user interaction required, with potential partial confidentiality, integr...

NCP Secure Entry Client 9.2 - Unquoted Service Paths Vulnerability

Exploit Title: NCPSecureEntryClient 9.2 - Unquoted Service Paths Exploit Author: Akif Mohamed Ik Vendor Homepage: http://software.ncp-e.com/ Software Link: http://software.ncp-e.com/NCPSecureEntryClient/Windows/9.2x/ Version: 9.2x Tested on: Windows 7 SP1 CVE : NA C:\Users\userwmic service get...

CVE-2017-17023

The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering www.ncp-e.com. The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure Entry Client" 10.11 r32792. A vulnerability in the software update feature of the VPN client allows...

CVE-2010-5203

Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client - Juniper Edition before 9.23 Build 18 allow local users to gain privileges via a Trojan horse 1 dvccsabase002.dll, 2 conman.dll, 3...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client - Juniper Edition before 9.23 Build 18 allow local users to gain privileges via a Trojan horse 1 dvccsabase002.dll, 2 conman.dll, 3...

CVE-2010-5203

CVE-2010-5203 affects NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client – Juniper Edition before 9.23 Build 18. The issue is an untrusted search path privilege escalation where local users can gain privileges via Trojan horse files in t...

CVE-2010-5203

Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client - Juniper Edition before 9.23 Build 18 allow local users to gain privileges via a Trojan horse 1 dvccsabase002.dll, 2 conman.dll, 3...

NCP Secure Client - Juniper Edition v.9.23.017 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ==================================================================== NCP Secure Client - Juniper Edition v.9.23.017 DLL Hijacking Exploit ==================================================================== / Exploit Title: NCP Secure Client...

NCP Secure Entry Client v.9.23.017 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ======================================================== NCP Secure Entry Client v.9.23.017 DLL Hijacking Exploit ======================================================== / Exploit Title: NCP Secure Entry Client v.9.23.017 DLL Hijacking...

CVE-2006-3551

NCP Secure Enterprise Client aka VPN/PKI client 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and...