CVE-2023-28872

Name of the Vulnerable Software and Affected Versions NCP Secure Enterprise Client versions prior to 13.10

Description The issue allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%TempNcpSupport* location. This can lead to elevated privileges and potential system compromise.

Recommendations For versions prior to 13.10, update to version 13.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the %LOCALAPPDATA%TempNcpSupport* location to minimize the risk of exploitation.