Medium severity · published Jul 31, 2024
CVE-2024-6977
Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover
6.5
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client: before 5.10.34.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
SDP Client · Cato Networks
before 5.10.28 · source: vendor
CC
Cato Client · Catonetworks
through 5.10.34 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-6977
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-6977
Exploit
https://support.catonetworks.com/hc/en-us/articles/19766795729437-CVE-2024-6977-Windows-SDP-Client-Sensitive-data-in-trace-logs-can-lead-to-account-takeover
More from SDP Client
8.8
CVE-2024-6978
Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users
8.8
CVE-2024-6975
Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file
8.8
CVE-2024-6973
Remote Code Execution in Cato Windows SDP client via crafted URLs
8.5
CVE-2026-10739
Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation
8.1
CVE-2025-3886
CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition