PT-2014-5612

CVE-2014-3932

Published

2014-06-02

Updated

2014-06-03

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CoSoSys Endpoint Protector versions 4.3.0.4 through 4.4.0.2

Description The issue allows remote attackers to execute arbitrary SQL commands via unspecified parameters in the device registration component.

Recommendations For versions 4.3.0.4 through 4.4.0.2, update to a version that contains a fix for this issue.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾