2024-07-31 18:03:13 +00:00
{
"id" : "CVE-2024-6973" ,
"sourceIdentifier" : "2505284f-8ffb-486c-bf60-e19c1097a90b" ,
"published" : "2024-07-31T17:15:11.153" ,
2024-08-01 14:03:18 +00:00
"lastModified" : "2024-08-01T12:42:36.933" ,
"vulnStatus" : "Awaiting Analysis" ,
2024-07-31 18:03:13 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
2024-07-31 22:03:15 +00:00
"value" : "Remote Code Execution in Cato Windows SDP client via crafted URLs.\nThis issue affects Windows SDP Client before 5.10.34."
2024-08-01 14:03:18 +00:00
} ,
{
"lang" : "es" ,
"value" : " Ejecuci\u00f3n remota de c\u00f3digo en el cliente Cato Windows SDP a trav\u00e9s de URL dise\u00f1adas. Este problema afecta a SDP Client  de Windows anterior a la versi\u00f3n 5.10.34."
2024-07-31 18:03:13 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "2505284f-8ffb-486c-bf60-e19c1097a90b" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
2024-07-31 22:03:15 +00:00
"vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" ,
2024-07-31 18:03:13 +00:00
"attackVector" : "NETWORK" ,
2024-07-31 22:03:15 +00:00
"attackComplexity" : "HIGH" ,
2024-07-31 18:03:13 +00:00
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
2024-07-31 22:03:15 +00:00
"baseScore" : 7.5 ,
2024-07-31 18:03:13 +00:00
"baseSeverity" : "HIGH"
} ,
2024-07-31 22:03:15 +00:00
"exploitabilityScore" : 1.6 ,
2024-07-31 18:03:13 +00:00
"impactScore" : 5.9
}
]
} ,
"weaknesses" : [
{
"source" : "2505284f-8ffb-486c-bf60-e19c1097a90b" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-20"
}
]
}
] ,
"references" : [
{
"url" : "https://support.catonetworks.com/hc/en-us/articles/19756987454237-CVE-2024-6973-Windows-SDP-Client-Remote-Code-Execution-via-crafted-URLs" ,
"source" : "2505284f-8ffb-486c-bf60-e19c1097a90b"
}
]
}