Palo Alto Networks Secdo vulnerabilities

3 CVEs affecting Palo Alto Networks Secdo, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1986, published 2020-04-08.

More from Palo Alto Networks.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-1984, published 2020-04-08. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system…
• CVE-2020-1986, published 2020-04-08. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:\) to cause a system crash on every…
• CVE-2020-1985, published 2020-04-08. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. This issue affects all versions…