Skip to main content

Secdo

3 CVEs product

Monthly

CVE-2020-1986 Apr 08, 19:15 MEDIUM This Month

Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:\) to cause a system crash on every login. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Secdo Paloaltonetworks
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2020-1985 Apr 08, 19:15 HIGH This Week

Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Secdo Paloaltonetworks
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2020-1984 Apr 08, 19:15 HIGH This Week

Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Secdo Paloaltonetworks
NVD
CVSS 3.1
7.8
EPSS
0.3%
EPSS 0% CVSS 5.5
MEDIUM This Month

Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:\) to cause a system crash on every login. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Secdo +1
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Secdo +1
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Secdo +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy