CVE-2024-6973CWE-20

Remote Code Execution in Cato Windows SDP client via crafted URLs

High · published July 31, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

Remote Code Execution in Cato Windows SDP client via crafted URLs.

This issue affects Windows SDP Client before 5.10.34.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00803 · 56.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-07-31T16:55Z
EPSS history
Timeline
  • 31 JUL 16:55Z
    Remote Code Execution in Cato Windows SDP client via crafted URLs
    cvelistv5