Securepoint - vulnerabilities (CVEs)

5 CVEs in 2 products, 0 in the last 30 days, newest from 2024-07-12.

Products

• Unified Threat Management - 3 CVEs
• Openvpn-client - 2 CVEs

Newest CVEs of Securepoint

• CVE-2024-39340 - CVSS 8.8 (high), 2024-07-12: The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification (when OTP is enabled) in both the…
• CVE-2023-47101 - CVSS 7.8 (high), 2023-10-30: The installer (aka openvpn-client-installer) in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair.
• CVE-2023-22897 - CVSS 6.5 (medium), 2023-04-12: An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be…
• CVE-2023-22620 - CVSS 7.5 (high), 2023-04-12: An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows sessionid information disclosure via an invalid…
• CVE-2021-35523 - CVSS 7.8 (high), 2021-06-28: Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\SYSTEM. A…