Skip to main content

Vendor/product archive

ncp-e / secure_enterprise_client CVEs

Beta · best-effort

8 CVEs tagged to ncp-e / secure_enterprise_client1 Critical, 3 High, 4 Medium, 0 Low, 0 Unrated.

CVE-2023-28872

Published Dec 25, 2023

Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2023-28871

Published Dec 9, 2023

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the operating system by creating a symbolic link.

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-28870

Published Dec 9, 2023

Insecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow attackers to write to configuration files from low-privileged user accounts.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-28869

Published Dec 9, 2023

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-28868

Published Dec 9, 2023

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by creating a symbolic link.

CVSS 8.1 · High
Vendor/product tagsBeta · best-effort
Showing 1-8 of 8 CVEsPage 1 of 1