CVE-2023-28872 is a high-severity vulnerability affecting NCP Secure Enterprise Client versions prior to 13.10. It allows authenticated attackers to achieve SYSTEM-level arbitrary code execution by exploiting a symbolic link vulnerability within the Support Assistant feature. The vulnerability has a CVSS score of 8.8, indicating a high potential for impact across confidentiality, integrity, and availability, with low attack complexity and no user interaction required. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there is minimal community discussion or media coverage, its high severity warrants attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 13.10CPE matchmatch criteria | cpe:2.3:a:ncp-e:secure_enterprise_client:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.