Описание
IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary DLL files from a remote source and execute them.
Ссылки
- PatchVendor Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2.7.3.230719 (включая) до 2.8.4.250925 (включая)
cpe:2.3:a:changingtec:idexpert:*:*:*:*:*:windows:*:*
EPSS
Процентиль: 25%
0.00087
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-494
Связанные уязвимости
CVSS3: 9.8
github
около 2 месяцев назад
IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary DLL files from a remote source and execute them.
EPSS
Процентиль: 25%
0.00087
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-494