Endpoint Security Evolution
by Stormshield
CVEs (8)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-45090 | Cri | 0.64 | 9.8 | 0.03 | Dec 21, 2021 | Stormshield Endpoint Security before 2.1.2 allows remote code execution. | ||
| CVE-2021-35957 | Med | 0.44 | 6.7 | 0.00 | Jul 13, 2021 | Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs (in %WINDIR%\system32) with malicious ones. | ||
| CVE-2023-35799 | Med | 0.36 | 5.5 | 0.00 | Jun 27, 2023 | Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SES Evolution agent to create arbitrary files with local system privileges. | ||
| CVE-2023-23561 | Med | 0.36 | 5.5 | 0.00 | May 30, 2023 | Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information. | ||
| CVE-2021-45089 | Med | 0.34 | 5.2 | 0.00 | Dec 21, 2021 | Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control. | ||
| CVE-2023-35800 | Med | 0.28 | 4.3 | 0.00 | Jun 27, 2023 | Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to… | ||
| CVE-2023-23562 | Med | 0.28 | 4.3 | 0.00 | May 31, 2023 | Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters. | ||
| CVE-2021-45091 | Med | 0.28 | 4.3 | 0.01 | Dec 21, 2021 | Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control. |
- risk 0.64cvss 9.8epss 0.03
Stormshield Endpoint Security before 2.1.2 allows remote code execution.
- risk 0.44cvss 6.7epss 0.00
Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs (in %WINDIR%\system32) with malicious ones.
- risk 0.36cvss 5.5epss 0.00
Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SES Evolution agent to create arbitrary files with local system privileges.
- risk 0.36cvss 5.5epss 0.00
Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information.
- risk 0.34cvss 5.2epss 0.00
Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control.
- risk 0.28cvss 4.3epss 0.00
Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to…
- risk 0.28cvss 4.3epss 0.00
Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters.
- risk 0.28cvss 4.3epss 0.01
Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control.