Skip to content
Noroxi

cynet records

4 published records for vendor cynet.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

All records

4 records
  • Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded files and profiles via a crafted GET request

    MediumCVSS 5.3No exploitEPSS 0%

    cynet · cynet 360Sep 8, 2022

  • Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via a crafted GET reques

    MediumCVSS 5.3No exploitEPSS 0%

    cynet · cynet 360Sep 8, 2022

  • Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET request sent to /WebApp

    MediumCVSS 5.3No exploitEPSS 0%

    cynet · cynet 360Sep 8, 2022

  • Cynet Client Agent v4.6.0.8010 allows attackers with Administrator rights to disable the EDR functions by disabling process privilege tokens

    MediumCVSS 4.4No exploitEPSS 0%

    cynet · client agentMar 28, 2023