Paloaltonetworks Secdo — known CVE vulnerabilities

Every CVE whose affected-product data names Paloaltonetworks Secdo, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-1984 — CVSS 7.8 (high): Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append…
• CVE-2020-1985 — CVSS 7.8 (high): Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and…
• CVE-2020-1986 — CVSS 5.5 (medium): Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root…