CVE-2024-6978: falha de média gravidade em Cato Networks SDP Client
Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.6epss 0.1%
Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
Cato Networks · SDP ClientCVEs relacionadas — Cato Networks SDP Client
No mesmo produto, das mais perigosas para as menos.
CVE-2024-6973HIGHRemote Code Execution in Cato Windows SDP client via crafted URLsEPSS 0.8%CVE-2024-6975HIGHCato Networks Windows SDP Client Local Privilege Escalation via openssl configuration fileEPSS 0.3%CVE-2025-3886MEDIUMCatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race ConditionEPSS 0.3%CVE-2024-6974HIGHCato Networks Windows SDP Client Local Privilege Escalation via self-upgradeEPSS 0.2%CVE-2024-6977MEDIUMCato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeoverEPSS 0.2%CVE-2026-10739HIGHCato Networks SDP Client for Windows is vulnerable to Local Privilege EscalationEPSS 0.1%