RCE in N/a
CVE-2024-36075
The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archive obtained from the Endpoint Protector or Unify server is extracted on the endpoint. An attacker who is able to modify the archive on the server could obtain remote code execution as an administrator on an endpoint.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.005 (42.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.
Affected products
- N/a — versions n/a
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-36075?
- CVE-2024-36075 is a medium-severity vulnerability in N/a, classified under Code Injection. CVSS score: 6.5/10. Published 2024-06-27.
- How severe is CVE-2024-36075?
- Medium severity. CVSS v3 base score is 6.5 out of 10.