Lucene search
HistoryMay 21, 2024 - 4:15 p.m.
CVE-2024-1721
vulnerability
windows
malicious update
hypr passwordless
5.6 Medium
CVSS4
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
ACTIVE
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/SC:N/VI:H/SI:H/VA:N/SA:N/AU:N/U:Green/R:U/V:C/RE:M
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1.
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Passwordless",
"vendor": "HYPR",
"versions": [
{
"lessThan": "9.1",
"status": "affected",
"version": "0",
"versionType": "patch"
}
]
}
]Related
nvd
nvd
CVE-2024-1721
2024-05-21 16:15:24
vulnrichment
vulnrichment
CVE-2024-1721
2024-05-21 15:41:49
cvelist
cvelist
CVE-2024-1721
2024-05-21 15:41:49
5.6 Medium
CVSS4
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
ACTIVE
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/SC:N/VI:H/SI:H/VA:N/SA:N/AU:N/U:Green/R:U/V:C/RE:M
6.9 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for CVE-2024-1721