Ncp E

ncp-e

9 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Secure Enterprise Client

secure_enterprise_client

Ncp Secure Entry Client

ncp_secure_entry_client

Secure Entry Client

secure_entry_client

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-26155 1Ncp E 2Ncp Secure Entry Client Secure Enterprise Client Jun 17, 2026 Nov 26, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.
CVE-2023-28872 1Ncp E 1Secure Enterprise Client Jun 17, 2026 Dec 25, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\NcpSupport* location.
CVE-2023-28871 1Ncp E 1Secure Enterprise Client Jun 17, 2026 Dec 9, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the operating system by creating a symbolic link.
CVE-2023-28870 1Ncp E 1Secure Enterprise Client Jun 17, 2026 Dec 9, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow attackers to write to configuration files from low-privileged user accounts.
CVE-2023-28869 1Ncp E 1Secure Enterprise Client Jun 17, 2026 Dec 9, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link.
CVE-2023-28868 1Ncp E 1Secure Enterprise Client Jun 17, 2026 Dec 9, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by creating a symbolic link.
CVE-2020-11474 1Ncp E 1Secure Enterprise Client Jun 17, 2026 Jul 28, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant.
CVE-2017-17023 2Ncp E Sophos 2Ipsec Client Ncp Secure Entry Client Nov 21, 2024 Apr 9, 2019 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure Entry Client" 10.11...Show more The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure Entry Client" 10.11 r32792. A vulnerability in the software update feature of the VPN client allows a man-in-the-middle (MITM) or man-on-the-side (MOTS) attacker to execute arbitrary, malicious software on a target user's computer. This is related to SIC_V11.04-64.exe (Sophos), NCP_EntryCl_Windows_x86_1004_31799.exe (NCP), and ncpmon.exe (both Sophos and NCP). The vulnerability exists because: (1) the VPN client requests update metadata over an insecure HTTP connection; and (2) the client software does not check if the software update is signed before running it.Show less
CVE-2010-5203 1Ncp E 3Secure Client Secure Enterprise ClientSecure Entry Client Apr 29, 2026 Sep 6, 2012 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client - Juniper Edition before 9.23 Build 18 allow local users to...Show more Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 18, and Secure Client - Juniper Edition before 9.23 Build 18 allow local users to gain privileges via a Trojan horse (1) dvccsabase002.dll, (2) conman.dll, (3) kmpapi32.dll, or (4) ncpmon2.dll file in the current working directory, as demonstrated by a directory that contains a .pcf or .spd file. NOTE: some of these details are obtained from third party information.Show less