CVE-2023-4996

Local privilege escalation

Description

Netskope was made aware of a security vulnerability in its NSClient product for version 100 & prior where a malicious non-admin user can disable the Netskope client by using a specially-crafted package. The root cause of the problem was a user control code when called by a Windows ServiceController did not validate the permissions associated with the user before executing the user control code. This user control code had permissions to terminate the NSClient service. 

Remediation

Solution:

  • Netskope patched the issue and released a new version. The issue was fixed in Release101. Customers are recommended to upgrade their client to the versions R101 or greater. Netskope download Instructions – Download Netskope Client and Scripts – Netskope Support https://support.netskope.com/s/article/Download-Netskope-Client-and-Scripts

Category

6.6
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.06%
Vendor Advisory netskope.com
Affected: Netskope Netskope Client
Published at:
Updated at:

References

Frequently Asked Questions

What is the severity of CVE-2023-4996?
CVE-2023-4996 has been scored as a medium severity vulnerability.
How to fix CVE-2023-4996?
To fix CVE-2023-4996: Netskope patched the issue and released a new version. The issue was fixed in Release101. Customers are recommended to upgrade their client to the versions R101 or greater. Netskope download Instructions – Download Netskope Client and Scripts – Netskope Support https://support.netskope.com/s/article/Download-Netskope-Client-and-Scripts
Is CVE-2023-4996 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2023-4996 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-4996?
CVE-2023-4996 affects Netskope Netskope Client.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.