CVE-2024-7402CWE-354

Netskope Client Configuration Tampering with Local MITM

High · published August 14, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope Client configuration by performing MITM (Man-in-the-Middle) activity on the Netskope Client communication channel. A successful exploitation would require administrative privileges on the machine, and could result in temporarily altering the configuration of Netskope Client or permanently disabling or removing the agent from the machine.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:H/SA:H
EPSS
0.00101 · 0.9th percentile
Weakness
CWE-354 · Improper Validation of Integrity Check Value
Published
2025-08-14T04:32Z
EPSS history
Timeline
  • 14 AUG 04:32Z
    Netskope Client Configuration Tampering with Local MITM
    cvelistv5