by Kastro
Paper/Archive/CVE-2024-36497

CVE-2024-36497

Faronics WINSelect (Standard + Enterprise) — Unhashed Storage of Password

EPSS 0.5%public exploitCVSS 9.1
critical.is priorityof 100
45
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 40.1.401 × 208.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

The decrypted configuration file contains the password in cleartext which is used to configure WINSelect. It can be used to remove the existing restrictions and disable WINSelect entirely.

Affected

ProductAffectedFixed inSource
WINSelect (Standard + Enterprise)see advisory8.30.xx.903CNA
winselect< 8.30.xx.9038.30.xx.903CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

writeupr.sec-consult.com/winselectreffaronics.com/en-uk/document-library/document/winselect-standard-release-notesrefseclists.org/fulldisclosure/2024/Jun/12