CVE-2023-28869

6.5 mediumEPSS 0.8%

Medium (6.5) in ncp-e secure enterprise client. EPSS 0.8% chance of exploitation in the next 30 days.

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2023-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ncp-e:secure_enterprise_client

References

https://herolab.usd.de/en/security-advisories/usd-2022-0003/
https://herolab.usd.de/en/security-advisories/usd-2022-0003/

Check your stack JSON