CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-28872

Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\NcpSupport* location.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 36.3%

CVSS Severity

CVSS v3 Score 8.8

References

https://herolab.usd.de/en/security-advisories/usd-2022-0006/
https://herolab.usd.de/en/security-advisories/usd-2022-0006/

Products affected by CVE-2023-28872

Ncp-E » Secure Enterprise Client » Version: N/A

cpe:2.3:a:ncp-e:secure_enterprise_client:-
Ncp-E » Secure Enterprise Client » Version: 10.14

cpe:2.3:a:ncp-e:secure_enterprise_client:10.14
Ncp-E » Secure Enterprise Client » Version: 10.15

cpe:2.3:a:ncp-e:secure_enterprise_client:10.15
Ncp-E » Secure Enterprise Client » Version: 12.22

cpe:2.3:a:ncp-e:secure_enterprise_client:12.22

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28872

Products

Pricing

Contact Us