QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-36724

Back to search

CVE-2021-36724

Published: Dec 29, 2021

Modified: Sep 16, 2024

PUBLISHED

CVSS v3.1

6.1

MEDIUM

Description

ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to crash.

VendorProductVersions

ForeScout

eServices / eNvoice

affected
SecureConnector 11.0.4.1024

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now