CVE-2020-9361

MEDIUM 5.5CVE-2020-9361 · Published 23/10/2020 · updated 17/06/2026

In short

CVE-2020-9361 is a MEDIUM (CVSS 5.5) vulnerability affecting csp (cryptopro).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 29.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
csp cryptopro	`≤ 5.0.0.10004`	No fix yet

Description

CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode input is mishandled during process creation.

References

youtube.com/watch · Exploit

More vulnerabilities in csp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free