Approved changes feed: RSS · Atom

cpe:2.3:a:ncp-e:ncp_secure_entry_client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNcp E (73a833a6-4284-5601-811a-d9f1db94c20e)
ProductNcp Secure Entry Client (946e76c8-8335-5f92-83a3-3e3cff5158b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25281 vulnerable 2026-06-08 05:13:42.174693 NCP_Secure_Entry_Client 9.2 - Unquoted Service Paths
HIGH (7.8)
NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted paths in services like ncprwsnt, rwsrsu, ncpclcfg, and NcpSec to inject malicious code that would execute with LocalSystem privileges during service startup.
Published: 2026-02-04T23:15:52.910Z
Updated: 2026-03-05T01:25:57.630Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.