Cryptopro

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Cryptopro records in CISA KEV

No Cryptopro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Csp 2 records LOW

Records

2 records in Csp · all components

TI-2020-07459 CVE-2020-9331 · GHSA-78q2-p2ph-jmx6

CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation…

LOW 34

CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with the SeChangeNotifyPrivilege right) because user-mode input is mishandled during process creation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00415 Published 2020-10-23 No fix listed

TI-2020-07483 CVE-2020-9361 · GHSA-3rrh-rx2j-x9xj

CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the…

LOW 25

CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode input is mishandled during process creation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0036 Published 2020-10-23 No fix listed

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0