CVE-2024-3334 USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0
Attackers can bypass USB encryption controls by modifying device metadata, compromising stored data confidentiality in Digital Guardian Windows Agent.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-3334?
CVE-2024-3334 is a medium-severity vulnerability in Fortra Digital Guardian Agent, published on 15 Nov 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A security bypass vulnerability exists in the Removable Media Encryption (RME)component of Digital Guardian Windows Agents prior to version 8.2.0. This allows a user to circumvent encryption controls by modifying metadata on the USB device thereby compromising the confidentiality of the stored data.
Weakness: CWE-922
Which versions are affected by CVE-2024-3334?
How do I fix CVE-2024-3334?
No fix has been published for CVE-2024-3334 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-3334 being exploited?
There is no known exploitation of CVE-2024-3334 in the wild and no public exploit code.
Sources
Also known as GHSA-p3h6-vvrg-6cp2.