Vulnerability Description
An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool component.
CVSS Score
8.1
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Catonetworks | Cato Client | < 5.4.0 |
Related Weaknesses (CWE)
References
- https://www.catonetworks.comProduct
- https://www.ns-echo.com/posts/cve_2023_43976.htmlExploit
- https://www.catonetworks.comProduct
- https://www.ns-echo.com/posts/cve_2023_43976.htmlExploit
FAQ
What is CVE-2023-43976?
CVE-2023-43976 is a vulnerability with a CVSS score of 8.1 (HIGH). An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool component.
How severe is CVE-2023-43976?
CVE-2023-43976 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-43976?
Check the references section above for vendor advisories and patch information. Affected products include: Catonetworks Cato Client.