Secure Enterprise Client vulnerabilities

2 known vulnerabilities in Secure Enterprise Client from Ncp-e. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Secure Enterprise Client: Improper Link Resolution Before File Access

  CVE-2023-28872Dec 25, 2023Ncp-e

  Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\NcpSupport* location.

• 8.1 High severity

  Secure Enterprise Client: Improper Link Resolution Before File Access

  CVE-2023-28868Dec 9, 2023Ncp-e

  Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by creating a symbolic link.