Faronics
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WINSelect (Standard + Enterprise) | 3 | – | Jun 24, 2024 |
| Deep Freeze Server Standard | 1 | – | Mar 12, 2024 |
| DeepFreeze | 1 | – | Oct 3, 2024 |
Exploited and recent CVEs
- CVE-2024-8159 Deep Freeze 9.00.020.5760 - Out-of-bounds read 0.1%
- CVE-2024-36497 Unhashed Storage of Password 0.5%
- CVE-2024-36496 Hardcoded Credentials 0.7%
- CVE-2024-36495 Read/Write Permissions for Everyone on Configuration File 0.3%
- CVE-2024-1618 Unquoted item or search path vulnerability in Faronics Deep Freeze Server Standard 0.2%