CVE-2024-6973: Remote Code Execution in Cato Windows SDP client via crafted URLs
Published Jul 31, 2024
·Updated
Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34.
Affected Software
1 affected component
CatoNetworks Cato Client Windows<5.10.34
Event History
Jul 31, 2024
CVE Published
via MITRE·04:55 PM
Data Sourced
via MITRE·04:55 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-6973?
CVE-2024-6973 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2024-6973?
To address CVE-2024-6973, users should upgrade the Cato Windows SDP client to version 5.10.34 or higher.
3
What systems are affected by CVE-2024-6973?
CVE-2024-6973 affects the Cato Windows SDP Client versions prior to 5.10.34.
4
What is the nature of the vulnerability in CVE-2024-6973?
CVE-2024-6973 involves remote code execution caused by maliciously crafted URLs.
5
Is there any workaround for CVE-2024-6973?
Currently, the only effective mitigation for CVE-2024-6973 is to update to the latest version of the Cato Windows SDP client.