GCVE - cpe:2.3:a:catonetworks:cato_client:*:*:*:*:*:windows:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:catonetworks:cato_client:*:*:*:*:*:windows:*:*

part: a version: * update: *

Vendor	Catonetworks (`6346a607-4f07-506f-8334-48957915f696`)
Product	Cato Client (`ff58affe-6d01-5b2c-96ce-96005ecbd7bb`)
Edition	*
Language	*
Software edition	*
Target software	windows
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-6978`	vulnerable	2026-06-08 06:58:20.876439	Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users MEDIUM (5.6) Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28. Published: 2024-07-31T16:56:16.063Z Updated: 2024-07-31T19:55:16.797Z Open on db.gcve.eu Reference links https://support.catonetworks.com/hc/en-us/articles/19767051500957-CVE-2024-6978-Windows-SDP-Client-Local-root-certificates-can-be-installed-with-low-privileged-users	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6977`	vulnerable	2026-06-08 06:58:20.876064	Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover MEDIUM (6.5) A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34. Published: 2024-07-31T16:56:06.000Z Updated: 2024-07-31T17:08:09.827Z Open on db.gcve.eu Reference links https://support.catonetworks.com/hc/en-us/articles/19766795729437-CVE-2024-6977-Windows-SDP-Client-Sensitive-data-in-trace-logs-can-lead-to-account-takeover	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6975`	vulnerable	2026-06-08 06:58:20.875559	Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file HIGH (8.8) Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34. Published: 2024-07-31T16:55:55.599Z Updated: 2024-08-01T08:56:42.944Z Open on db.gcve.eu Reference links https://support.catonetworks.com/hc/en-us/articles/19758025406621-CVE-2024-6975-Windows-SDP-Client-Local-Privilege-Escalation-via-openssl-configuration-file	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6974`	vulnerable	2026-06-08 06:58:20.875114	Cato Networks Windows SDP Client Local Privilege Escalation via self-upgrade HIGH (8.8) Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34. Published: 2024-07-31T16:55:40.104Z Updated: 2024-07-31T19:53:51.141Z Open on db.gcve.eu Reference links https://support.catonetworks.com/hc/en-us/articles/19762641007133-CVE-2024-6974-Windows-SDP-Client-Local-Privilege-Escalation-via-self-upgrade	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6973`	vulnerable	2026-06-08 06:58:20.874455	Remote Code Execution in Cato Windows SDP client via crafted URLs HIGH (7.5) Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34. Published: 2024-07-31T16:55:20.505Z Updated: 2024-08-06T19:09:57.379Z Open on db.gcve.eu Reference links https://support.catonetworks.com/hc/en-us/articles/19756987454237-CVE-2024-6973-Windows-SDP-Client-Remote-Code-Execution-via-crafted-URLs	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.