Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Cato Networks Component: Cato Client Clear all filters
TI-2025-03433 CVE-2025-3886 · GHSA-hhrg-ww69-4cxj

CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition

Priority LOW 25

An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool component.

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.0025 Published 2025-04-27 Fixed in 5.8.0 CWE-362
TI-2024-06476 CVE-2024-6978 · GHSA-q22c-j54j-x955

Improper input validation in Cato Networks SDP Client

Priority LOW 37

Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00142 Published 2024-07-31 Fixed in 5.10.34 CWE-20
TI-2024-06474 CVE-2024-6975 · GHSA-cxjq-fmfx-pgf3

Untrusted search path in Cato Networks SDP Client

Priority MEDIUM 40

Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00271 Published 2024-07-31 Fixed in 5.10.34 CWE-426
TI-2024-06473 CVE-2024-6974 · GHSA-24g8-xhgr-ch6g

Incorrect default permissions in Cato Networks SDP Client

Priority MEDIUM 40

Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00241 Published 2024-07-31 Fixed in 5.10.34 CWE-276