CVE-2023-29820
MEDIUMWebroot SecureAnywhere Endpoint Protection CE <23.1 v.9.0.33.39 - I...
Title source: llmDescription
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819.
Scores
CVSS v3
5.5
EPSS
0.0003
EPSS Percentile
8.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-552
CWE-668
Status
published
Products (1)
webroot/secureanywhere
< 9.0.33.39
Published
May 12, 2023
Tracked Since
Feb 18, 2026