Read the docs

Faronics

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Faronics records in CISA KEV

No Faronics vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Insight 10 records HIGH Deep Freeze 1 record LOW

Records

16 records

TI-2024-24273 CVE-2024-36497 · GHSA-7p6q-hqg2-6cpg

Unhashed Storage of Password

Priority HIGH 80

The decrypted configuration file contains the password in cleartext which is used to configure WINSelect.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00462 Published 2024-06-24 Fixed in 8.30.xx.903 CWE-312
TI-2024-24271 CVE-2024-36495 · GHSA-3g4h-66cq-c8vg

Read/Write Permissions for Everyone on Configuration File

Priority HIGH 69

The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file system which "Everyone" has read and write access to, path to file: C:\ProgramData\WINSelect\WINSelect.w…

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00313 Published 2024-06-24 Fixed in 8.30.xx.903 CWE-276
TI-2024-24272 CVE-2024-36496 · GHSA-jm6p-8vc7-99q9

Hardcoded credentials in Faronics WINSelect

Priority HIGH 68

The configuration file is encrypted with a static key derived from a static five-character password which allows an attacker to decrypt this file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00693 Published 2024-06-24 Fixed in 8.30.xx.903 CWE-798
TI-2024-07566 CVE-2024-8159 · GHSA-8hwq-h6q5-348p

Deep Freeze 9.00.020.5760 - Out-of-bounds read

Priority LOW 27

Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of the FarDisk.sys driver.

CVSS 3.1MEDIUM 6.4 Local Low privileges No interaction EPSS 0.0015 Published 2024-10-03 No fix listed CWE-125
Open these records in search →