Cisco Duo Authentication For Windows Logon And Rdp — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Duo Authentication For Windows Logon And Rdp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-3427 — CVSS 6.6 (medium): The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker with local user…
• CVE-2023-20123 — CVSS 6.3 (medium): A vulnerability in the offline access mode of Cisco Duo Two-Factor Authentication for macOS and Duo Authentication for Windows Logon and…
• CVE-2024-20301 — CVSS 6.2 (medium): A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary…
• CVE-2024-20292 — CVSS 4.4 (medium): A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker…