CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-8159 – Deep Freeze 9.00.020.5760 - Out-of-bounds read
https://notcve.org/view.php?id=CVE-2024-8159
Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of the FarDisk.sys driver. Deep Freeze 9.00.020.5760 es vulnerable a una vulnerabilidad de lectura fuera de los límites al activar el código IOCTL 0x70014 del controlador FarDisk.sys. • https://fluidattacks.com/advisories/kanka https://www.faronics.com/products/deep-freeze • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-1618 – Unquoted item or search path vulnerability in Faronics Deep Freeze Server Standard
https://notcve.org/view.php?id=CVE-2024-1618
A search path or unquoted item vulnerability in Faronics Deep Freeze Server Standard, which affects versions 8.30.020.4627 and earlier. This vulnerability affects the DFServ.exe file. An attacker with local user privileges could exploit this vulnerability to replace the legitimate DFServ.exe service executable with a malicious file of the same name and located in a directory that has a higher priority than the legitimate directory. Thus, when the service starts, it will run the malicious file instead of the legitimate executable, allowing the attacker to execute arbitrary code, gain unauthorized access to the compromised system or stop the service from running. Una ruta de búsqueda o vulnerabilidad de elemento sin comillas en Faronics Deep Freeze Server Standard, que afecta a las versiones 8.30.020.4627 y anteriores. • https://www.incibe.es/en/incibe-cert/notices/aviso/unquoted-item-or-search-path-vulnerability-faronics-deep-freeze-server • CWE-428: Unquoted Search Path or Element •
CVSS: 3.3EPSS: 0%CPEs: 2EXPL: 1CVE-2023-28351
https://notcve.org/view.php?id=CVE-2023-28351
An issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any user on a computer with the Student application installed is logged to a world-readable directory. A local attacker can trivially extract these cleartext keystrokes, potentially enabling them to obtain PII and/or to compromise personal accounts owned by the victim. • https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight https://research.nccgroup.com/?research=Technical%20advisories • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 1CVE-2023-28349
https://notcve.org/view.php?id=CVE-2023-28349
An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a crafted program that functions similarly to the Teacher Console. This can compel Student Consoles to connect and put themselves at risk automatically. Connected Student Consoles can be compelled to write arbitrary files to arbitrary locations on disk with NT AUTHORITY/SYSTEM level permissions, enabling remote code execution. • https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight https://research.nccgroup.com/?research=Technical%20advisories • CWE-346: Origin Validation Error •
CVSS: 7.3EPSS: 0%CPEs: 2EXPL: 1CVE-2023-28346
https://notcve.org/view.php?id=CVE-2023-28346
An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote attacker to communicate with the private API endpoints exposed at /login, /consoleSettings, /console, etc. despite Virtual Host Routing being used to block this access. Remote attackers can interact with private pages on the web server, enabling them to perform privileged actions such as logging into the console and changing console settings if they have valid credentials. • https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight https://research.nccgroup.com/?research=Technical%20advisories • CWE-732: Incorrect Permission Assignment for Critical Resource •