Digital Guardian Agent 7.7.4.0042 allows an administrator (who ordinarily does not have a supported way to uninstall the product) to disable some of the agent functionality and then exfiltrate files to an external USB device.
Vendor
digitalguardian vulnerabilities
5 published CVES affecting digitalguardian, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 0
- High
- 1
- Medium
- 4
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest digitalguardian CVEs
Newest publication first
-
MediumCVSS 5.1 EPSS 0.24%
-
CVE-2018-10176 Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue.
PublishedMediumCVSS 6.5 EPSS 2.2%Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue.
-
MediumCVSS 6.5 EPSS 1.1%
Digital Guardian Management Console 7.1.2.0015 has an XXE issue.
-
MediumCVSS 6.5 EPSS 1.1%
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role.
-
HighCVSS 8.8 EPSS 5.1%
Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.