CVE-2025-4660

CVE-2025-4660 affects Forescout SecureConnector Windows agent. The issue arises from improper access controls on a named pipe (the FS SC UNINSTALL PIPE), which is accessible to Everyone and does not restrict remote connections, enabling network-based redirects of the SecureConnector agent to a ro...

CVE-2024-9950

CVE-2024-9950 affects Forescout SecureConnector on Windows (version 11.3.07.0109 and earlier). The root cause is an insecure temporary directory that allows an unauthenticated user to modify compliance scripts, enabling local privilege escalation. The CVE is supported by published PoC/example exp...

CVE-2024-9949

The CVE-2024-9949 entry documents a DoS in ForeScout SecureConnector (Windows) version 11.1.02.1019 where an unprivileged user can corrupt the configuration file, causing Denial of Service in the application. Connected sources corroborate the affected software and behavior, and PT-2024-39961 expl...

CVE-2021-36724

CVE-2021-36724 affects ForeScout SecureConnector Local Service. The vulnerability arises when a low-privileged user writes a large amount of characters to the installationPath, causing a buffer overflow and overwriting a stack cookie, which leads to the service crashing (DoS). Digital references ...

CVE-2016-9486

CVE-2016-9486 affects ForeScout CounterACT's Windows SecureConnector agent. The agent downloads and runs scripts/executables from the current user’s TEMP directory while executing a SYSTEM-level batch file, creating insecure permissions and enabling privilege escalation for a local unprivileged u...

CVE-2023-39374

CVE-2023-39374 affects ForeScout NAC SecureConnector 11.2. The issue is described as CWE-427: Uncontrolled Search Path Element, attributed to an uncontrolled search path element in the affected software. According to NVD/NVD-derived metrics, the vulnerability is rated CVSS v3.1 base score 7.8 (HI...

CVE-2016-9485

CVE-2016-9485 affects ForeScout CounterACT’s SecureConnector agent on Windows. The agent runs with SYSTEM/administrator privileges and downloads scripts/executables from the CounterACT appliance but does not set permissions on downloaded files, allowing an authenticated unprivileged user to take ...

CVE-2024-22795

The CVE-2024-22795 entry covers an Insecure Permissions vulnerability in ForeScout SecureConnector (v11.3.06.0063). A local attacker can escalate privileges via the Recheck Compliance Status component, as documented across multiple sources in the connected set (Red Hat advisory mirrors the same i...