---
id: 4664
title: "[CVE-2024-36072] A Deep Dive into the CoSoSys EndPoint Protector Exploit: Remote Code Execution"
cve: CVE-2024-36072
source_domain: theori.io
source_url: "https://theori.io/blog/a-deep-dive-into-the-cososys-endpoint-protector-exploit-remote-code-execution"
published_at: "2024-08-29 15:00"
tags: ["rce", "netwrix", "cve-2024-36072", "cososys", "endpoint-protector", "apt-simulation"]
phying_url: "https://phying.com/item/4664"
lang: en
---

# [CVE-2024-36072] A Deep Dive into the CoSoSys EndPoint Protector Exploit: Remote Code Execution

## Summary

Theori’s APT simulation uncovered four RCEs in CoSoSys Endpoint Protector (CVE-2024-36072 to -36075), including unauthenticated root command execution; all are patched, with a full exploit analysis.

## Intelligence Metadata

- **Sources:** theori.io
- **CVE:** CVE-2024-36072
- **Published:** 2024-08-29 15:00
- **Original:** https://theori.io/blog/a-deep-dive-into-the-cososys-endpoint-protector-exploit-remote-code-execution
- **Phying News:** https://phying.com/item/4664