Priority LOW 27
Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of the FarDisk.sys driver.
CVSS 3.1MEDIUM 6.4· Local · Low privileges · No interaction · EPSS 0.0015 · Published 2024-10-03 · No fix listed CWE-125
Priority HIGH 80
The decrypted configuration file contains the password in cleartext which is used to configure WINSelect.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00462 · Published 2024-06-24 · Fixed in 8.30.xx.903 CWE-312
Priority HIGH 68
The configuration file is encrypted with a static key derived from a static five-character password which allows an attacker to decrypt this file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00693 · Published 2024-06-24 · Fixed in 8.30.xx.903 CWE-798
Priority HIGH 69
The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file system which "Everyone" has read and write access to, path to file: C:\ProgramData\WINSelect\WINSelect.w…
CVSS 3.1HIGH 7.7· Local · No auth · No interaction · EPSS 0.00313 · Published 2024-06-24 · Fixed in 8.30.xx.903 CWE-276
Priority LOW 36
A search path or unquoted item vulnerability in Faronics Deep Freeze Server Standard, which affects versions 8.30.020.4627 and earlier.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00245 · Published 2024-03-12 · No fix listed CWE-428
Priority HIGH 73
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01362 · Published 2023-05-30 · No fix listed CWE-434
Priority HIGH 66
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00686 · Published 2023-05-30 · No fix listed CWE-863
Priority MEDIUM 49
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00303 · Published 2023-05-30 · No fix listed CWE-532
Priority MEDIUM 60
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01069 · Published 2023-05-30 · No fix listed CWE-79
Priority HIGH 73
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01204 · Published 2023-05-30 · No fix listed CWE-346
Priority HIGH 68
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00442 · Published 2023-05-30 · No fix listed CWE-319
Priority HIGH 76
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.02773 · Published 2023-05-30 · No fix listed CWE-79
Priority HIGH 67
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
CVSS 3.1HIGH 7.3· Adjacent network · Low privileges · No interaction · EPSS 0.00884 · Published 2023-05-30 · No fix listed CWE-732
Priority MEDIUM 54
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00319 · Published 2023-05-30 · No fix listed CWE-312
Priority MEDIUM 64
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
CVSS 3.1HIGH 7.1· Adjacent network · No auth · No interaction · EPSS 0.00907 · Published 2023-05-30 · No fix listed CWE-22
Priority LOW 33
The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service (crash) and execute arbitrary code via a crafted IOCTL request that writes…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00616 · Published 2014-11-20 · No fix listed CWE-399
THREATIST.IORead the docs