Approved changes feed: RSS · Atom

cpe:2.3:a:netwrix:cososys_endpoint_protector:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetwrix (2c17eb0e-c1fa-5beb-87ec-e19d616e165b)
ProductCososys Endpoint Protector (f1758c73-1119-5fec-91a2-c99c77fdd3c3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36074 vulnerable 2026-06-08 06:39:43.611668 Details available
Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the Endpoint Protector and Unify agent in the way that the EasyLock dependency is acquired from the server. An attacker with administrative access to the Endpoint Protector or Unify server can cause a client to acquire and execute a malicious file resulting in remote code execution.
Published: 2024-06-27T00:00:00.000Z
Updated: 2024-08-02T03:30:12.958Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36073 vulnerable 2026-06-08 06:39:43.611052 Details available
Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the shadowing component of the Endpoint Protector and Unify agent which allows an attacker with administrative access to the Endpoint Protector or Unify server to overwrite sensitive configuration and subsequently execute system commands with SYSTEM/root privileges on a chosen client endpoint.
Published: 2024-06-27T00:00:00.000Z
Updated: 2024-08-02T03:30:12.673Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36072 vulnerable 2026-06-08 06:39:43.609256 Details available
Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector and Unify server application which allows an unauthenticated remote attacker to send a malicious request, resulting in the ability to execute system commands with root privileges.
Published: 2024-06-27T00:00:00.000Z
Updated: 2024-08-02T03:30:12.535Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.