• David Cash
• Richard Warren
• 26 Nov, 2024
• • Vulnerability Disclosure

Palo Alto GlobalProtect - RCE and Privilege Escalation via Malicious VPN Server (CVE-2024-5921)

Summary Both the Windows and macOS versions of the GlobalProtect VPN client are vulnerable to remote code execution (RCE) and privilege escalation via …

Read Article

• David Cash
• Richard Warren
• 26 Nov, 2024
• • Vulnerability Disclosure

SonicWall NetExtender for Windows - RCE as SYSTEM via EPC Client Update (CVE-2024-29014)

Summary The SonicWALL NetExtender VPN client for Windows, version 10.2.339 and earlier, contains a vulnerability allowing remote code execution (RCE) …

Read Article

• Richard Warren
• David Cash
• 31 Jul, 2024
• • Cato
  • VPN
  • Vulnerability Disclosure

AmberWolf Uncovers Critical Vulnerabilities in Cato Client

As part of a recent client engagement, we conducted a product assessment of the Cato Client. During this assessment, we discovered significant …

Read Article

• Richard Warren
• David Cash
• 31 Jul, 2024
• • Cato
  • VPN
  • Vulnerability Disclosure

Cato Client - Account Takeover Via Sensitive Log Data (CVE-2024-6977)

The Cato Client was found to store authentication data within the trace logs generated by the desktop client during SSO authentication.

Read Article

• Richard Warren
• David Cash
• 31 Jul, 2024
• • Cato
  • VPN
  • Vulnerability Disclosure

Cato SSO - Open Redirect Leading to Config Theft

The web service used during the Cato SSO authentication flow was found to contain an Open Redirect issue, which could allow a remote attacker to …

Read Article

• Richard Warren
• David Cash
• 31 Jul, 2024
• • Cato
  • VPN
  • Vulnerability Disclosure

Remote Code Execution via Crafted URLs (CVE-2024-6973)

The Cato Client suffers from a Remote Code Execution vulnerability which could be triggered via a URL handler, or via requests to the local webserver.

Read Article