PatchTheCVEcsp vulnerabilities and fixes
Recent CVEs affecting csp, with upgrade or downgrade steps. 2 tracked.
csp has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-10-23. Highest priority: CVE-2020-9331 (score 41/100).
- CVE-2020-9361 MEDIUM 5.5 UPGRADE CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege righ
- CVE-2020-9331 HIGH 7.8 UPGRADE CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with t
FAQ
How do I fix csp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is csp being exploited right now?
None of the tracked csp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which csp CVE should I patch first?
CVE-2020-9331 currently ranks highest (41/100): CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with t.