Known vulnerabilities in Duo Authentication for Windows Logon and RDP

Vendor: Cisco Systems, Inc
Software: Duo Authentication for Windows Logon and RDP
Software CPE: cpe:2.3:a:cisco_systems:duo_authentication_for_windows_logon_and_rdp:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Duo Authentication for Windows Logon and RDP Duo Authentication for Windows Logon and RDP is affected by 3 known vulnerabilities: 3 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87184 - Improper Authentication
CVE-2024-20301		 CWE-287 Low
No
No
 - 07.03.2024 SB2024030717
#VU87183 - Exposure of sensitive information to an unauthorized actor
CVE-2024-20292		 CWE-200 Low
No
No
 - 07.03.2024 SB2024030717
#VU74551 - Authentication Bypass by Capture-replay
CVE-2023-20123		 CWE-294 Low
No
No
 4.2.2 06.04.2023 SB2023040656