Vulnerabilities > NCP E > Secure Enterprise Client > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-12-09 CVE-2023-28869 Link Following vulnerability in Ncp-E Secure Enterprise Client 10.14/10.15
Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link.
network
low complexity
ncp-e CWE-59
6.5
6.5
2023-12-09 CVE-2023-28870 Incorrect Default Permissions vulnerability in Ncp-E Secure Enterprise Client 10.14/10.15
Insecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow attackers to write to configuration files from low-privileged user accounts.
network
low complexity
ncp-e CWE-276
6.5
6.5
2023-12-09 CVE-2023-28871 Link Following vulnerability in Ncp-E Secure Enterprise Client 10.14/10.15
Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the operating system by creating a symbolic link.
network
low complexity
ncp-e CWE-59
4.3
4.3