CyberRota Analysis
AI-GeneratedNetskope Endpoint DLP on Windows systems is vulnerable to an integer overflow that can be triggered by a privileged user sending a crafted message to the EPDLP process port, particularly when Memory Integrity is disabled. Exploitation of this vulnerability could lead to memory corruption, resulting in denial-of-service, arbitrary code execution, or privilege escalation. Organizations using Netskope EPDLP should prioritize immediate remediation, especially those with the module enabled and Memory Integrity turned off.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption. Successful exploitation would require the EPDLP module to be enabled in the client configuration, and that Memory Integrity is disabled. A successful exploit could potentially result in a denial-of-service, arbitrary code execution, or privilege escalation on the local machine.