CVE-2025-3886: falha de média gravidade em Cato Networks SDP Client
CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.7epss 0.3%
An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool component.
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/AU:Y/R:U/RE:L/U:Green
Produtos afetados
Cato Networks · SDP ClientCVEs relacionadas — Cato Networks SDP Client
No mesmo produto, das mais perigosas para as menos.
CVE-2024-6973HIGHRemote Code Execution in Cato Windows SDP client via crafted URLsEPSS 0.8%CVE-2024-6975HIGHCato Networks Windows SDP Client Local Privilege Escalation via openssl configuration fileEPSS 0.3%CVE-2024-6974HIGHCato Networks Windows SDP Client Local Privilege Escalation via self-upgradeEPSS 0.2%CVE-2024-6977MEDIUMCato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeoverEPSS 0.2%CVE-2024-6978MEDIUMCato Networks Windows SDP Client Local root certificates can be installed by low-privileged usersEPSS 0.1%CVE-2026-10739HIGHCato Networks SDP Client for Windows is vulnerable to Local Privilege EscalationEPSS 0.1%