clario records

3 published records for vendor clario.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
31Monitor	CVE-2024-34474Proof of concept	Clario through 2024-04-11 for Desktop has weak permissions for %PROGRAMDATA%\Clario and tries to load DLLs from there as SYSTEM.CWE-276	High7.8	0.3%May 5, 2024
25Monitor	CVE-2023-36671No exploit	An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS.clario · vpn · CWE-319 Weak crypto	Medium6.3	0.2%Aug 9, 2023
22Monitor	CVE-2023-36672No exploit	An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS.clario · vpn · CWE-319 Pre-auth Weak crypto	Medium5.7	0.5%Aug 9, 2023

CVE-2024-34474
31Monitor
Clario through 2024-04-11 for Desktop has weak permissions for %PROGRAMDATA%\Clario and tries to load DLLs from there as SYSTEM.
HighCVSS 7.8Proof of conceptEPSS 0%
May 5, 2024
CVE-2023-36671
25Monitor
An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS.
MediumCVSS 6.3No exploitEPSS 0%
- Weak crypto
clario · vpnAug 9, 2023
CVE-2023-36672
22Monitor
An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS.
MediumCVSS 5.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
clario · vpnAug 9, 2023