CVE-2021-36724

ForeScout - SecureConnector Local Service DoS

Medium · published December 29, 2021

CVSS v3.1
6.1
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to crash.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00223 · 12.2th percentile
Published
2021-12-29T17:02Z
EPSS history
Timeline
  • 29 DEC 17:02Z
    ForeScout - SecureConnector Local Service DoS
    cvelistv5