Skip to main content

Secureconnector CVE-2024-9949

MEDIUM
Initialization of a Resource with an Insecure Default (CWE-1188)
2024-10-23 a14582b7-06f4-4d66-8e82-3d7ba3739e88
Denial Of Service Microsoft Secureconnector
5.8
CVSS 4.0 · Vendor: a14582b7-06f4-4d66-8e82-3d7ba3739e88
Share

Severity by source

Vendor (a14582b7-06f4-4d66-8e82-3d7ba3739e88) PRIMARY
5.8 MEDIUM
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (a14582b7-06f4-4d66-8e82-3d7ba3739e88) · only source for this CVE.

CVSS VectorVendor: a14582b7-06f4-4d66-8e82-3d7ba3739e88

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

1
CVE Published
Oct 23, 2024 - 18:15 cve.org
MEDIUM 5.8

DescriptionCVE.org

Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application.

AnalysisAI

Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application. Rated medium severity (CVSS 5.8). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-1188. Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service in the application. Affected products include: Forescout Secureconnector.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Secureconnector

View all
CVE-2024-22795 HIGH POC
7.0 Feb 08

Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privi
CVE-2023-39374 HIGH
7.8 Sep 03

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element. Rated high severity (CVSS 7.8),

CVE-2021-36724 MEDIUM
5.5 Dec 29

ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the sec
CVE-2025-4660 HIGH
8.7 May 13

A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access co
CVE-2024-9950 HIGH
8.5 Jan 02

A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance s

Same weakness CWE-1188 – Initialization of a Resource with an Insecure Default

View all
CVE-2017-4971 MEDIUM
5.9
CVE-2023-27524 CRITICAL POC
9.8
CVE-2022-24706 CRITICAL POC
9.8
CVE-2017-7964 CRITICAL POC
10.0
CVE-2017-8218 CRITICAL POC
9.8
CVE-2026-28775 CRITICAL POC
9.8
CVE-2025-70998 CRITICAL POC
9.8
CVE-2021-42109 CRITICAL POC
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2024-9949 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy