Snow Software

Records12All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Snow Software records in CISA KEV

TI-2021-19919 Apache Log4j2 Remote Code Execution Vulnerability CRITICAL 100KEV 2021-12-10

Components

Products in the NVD configurations · select one to filter the records

Snow Inventory Agent 5 records LOW Snow License Manager 4 records LOW Snow Commander 1 record CRITICAL Snow Inventory Java Scanner 1 record LOW Vm Access Proxy 1 record CRITICAL

Records

5 records in Snow Inventory Agent · all components

TI-2024-01066 CVE-2024-1149 · GHSA-7w7c-rqj8-5pmg

Improper validation of update packages

LOW 35

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2024-02-08 No fix listed CWE-347

TI-2021-09032 CVE-2021-27579 · GHSA-jc9p-889f-c7jp

Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and…

LOW 35

Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00477 Published 2021-02-23 No fix listed

TI-2024-01067 CVE-2024-1150 · GHSA-fcj4-pm86-7gjw

Improper validation of update packages

LOW 33

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 7.3.1.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00116 Published 2024-02-08 No fix listed CWE-347

TI-2021-18299 CVE-2021-41562 · GHSA-p28f-73x9-f7vr

Deletion of arbitrary files vulnerability in Snow Agent for Windows

LOW 27

A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00252 Published 2021-11-03 No fix listed CWE-64

TI-2023-06556 CVE-2023-7169 · GHSA-p3jw-3876-6r2f

Impersonate vendor signed Powershell scripts

LOW 26

Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.0016 Published 2024-02-08 No fix listed CWE-290

Open these records in search →

Critical	1
High	7
Medium	4
Low	0
No CVSS	0