Vendors / Cordaware Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Cordaware records in CISA KEV No Cordaware vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
Cordaware bestinformed Microsoft Windows client before 6.2.1.0 is affected by insecure SSL certificate verification and insecure access patterns.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01203 · Published 2019-02-25 · No fix listed CWE-295
Priority LOW 35
The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands an…
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00558 · Published 2019-02-25 · No fix listed
Open these records in search → All records by CVSS severity
Critical1 High3 Medium2 Low0 No CVSS0