Ncp-e Secure Enterprise Client — known CVE vulnerabilities

Every CVE whose affected-product data names Ncp-e Secure Enterprise Client, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2025-26155 — CVSS 9.8 (critical): NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.
• CVE-2023-28872 — CVSS 8.8 (high): Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a…
• CVE-2023-28868 — CVSS 8.1 (high): Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by…
• CVE-2020-11474 — CVSS 7.8 (high): NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant.
• CVE-2010-5203 — CVSS 6.9 (medium): Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build…
• CVE-2023-28870 — CVSS 6.5 (medium): Insecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow attackers to write to configuration files…
• CVE-2023-28869 — CVSS 6.5 (medium): Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating…
• CVE-2023-28871 — CVSS 4.3 (medium): Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the operating system by…