CVE-2024-24912: Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file
Published May 1, 2024
·Updated
A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system.
Affected Software
3 affected components
Harmony Endpoint Security Client<=E88.10
All of the following
Checkpoint Harmony Endpoint>=e86.10<e88.20
Microsoft Windows
Event History
May 1, 2024
CVE Published
via MITRE·01:22 PM
Data Sourced
via MITRE·01:22 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-24912?
CVE-2024-24912 is classified as a local privilege escalation vulnerability.
2
How do I fix CVE-2024-24912?
To fix CVE-2024-24912, update the Harmony Endpoint Security Client to the latest version beyond E88.10.
3
What systems are affected by CVE-2024-24912?
CVE-2024-24912 affects Harmony Endpoint Security Client for Windows versions E88.10 and below.
4
What kind of attack does CVE-2024-24912 enable?
CVE-2024-24912 enables an attacker to execute local privileged code, leading to potential system control.
5
Who is the vendor for CVE-2024-24912?
The vendor for CVE-2024-24912 is Harmony, specifically for their Endpoint Security Client product.