VYPR

NAC SecureConnector

by Forescout

CVEs (5)

  • CVE-2024-9950HigJan 2, 2025
    risk 0.51cvss 7.8epss 0.00

    A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory.

  • CVE-2023-39374HigSep 3, 2023
    risk 0.51cvss 7.8epss 0.00

    ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element

  • CVE-2024-22795HigFeb 8, 2024
    risk 0.46cvss 7.0epss 0.00

    Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the Recheck Compliance Status component.

  • CVE-2024-9949MedOct 23, 2024
    risk 0.40cvss 6.1epss 0.00

    Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application.

  • CVE-2021-36724MedDec 29, 2021
    risk 0.40cvss 6.1epss 0.00

    ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing…