Pcprotect

pcprotect

3 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-36670 1Pcprotect 1Endpoint Nov 21, 2024 Sep 6, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 PCProtect Endpoint prior to v5.17.470 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SY...Show more PCProtect Endpoint prior to v5.17.470 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.Show less
CVE-2019-16913 1Pcprotect 1Antivirus Nov 21, 2024 Oct 7, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILES(X86)%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: (F)" to the contents of the directory and its subfolders....Show more PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILES(X86)%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: (F)" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as LocalSystem. This allows any user to escalate privileges to "NT AUTHORITY\SYSTEM" by substituting the service's binary with a Trojan horse.Show less
CVE-2018-17776 1Pcprotect 1Antivirus Nov 21, 2024 Sep 28, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect, which allows local users to gain privileges by replacing an executable file with a Trojan horse.