1. Home
  2. CVE Database
  3. CVE-2024-6973
HIGH · 7.5

CVE-2024-6973

Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34.

Vulnerability Description

Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CatonetworksCato Client< 5.10.34

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2024-6973?

CVE-2024-6973 is a vulnerability with a CVSS score of 7.5 (HIGH). Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34.

How severe is CVE-2024-6973?

CVE-2024-6973 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-6973?

Check the references section above for vendor advisories and patch information. Affected products include: Catonetworks Cato Client.