https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:35:28 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01922 bdu:2024-01922 https://cve.radiocsirt.org/vuln/bdu:2024-01922 https://cve.radiocsirt.org/vuln/cisco-sa-duo-win-bypass-pn42kkbm <p>A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of the affected device. An attacker with primary user credentials could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the affected device without valid permissions. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of the affected device. An attacker with primary user credentials could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the affected device without valid permissions. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-duo-win-bypass-pn42kkbm https://cve.radiocsirt.org/vuln/cnvd-2024-41621 cnvd-2024-41621 https://cve.radiocsirt.org/vuln/cnvd-2024-41621 https://cve.radiocsirt.org/vuln/euvd-2026-3648 EUVD-2026-3648 https://cve.radiocsirt.org/vuln/euvd-2026-3648 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20301 <p>A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of the affected device. An attacker with primary user credentials could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the affected device without valid permissions.</p> <p>A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of the affected device. An attacker with primary user credentials could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the affected device without valid permissions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20301 https://cve.radiocsirt.org/vuln/ghsa-8cv6-h2pr-548g <p>A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device.</p> <p>This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of the affected device. An attacker with primary user credentials could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the affected device without valid permissions.</p> <p>A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device.</p> <p>This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of the affected device. An attacker with primary user credentials could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the affected device without valid permissions.</p> https://cve.radiocsirt.org/vuln/ghsa-8cv6-h2pr-548g https://cve.radiocsirt.org/vuln/gsd-2024-20301 gsd-2024-20301 https://cve.radiocsirt.org/vuln/gsd-2024-20301