Netskope Client Improper Service Loading Vulnerability on Windows Systems Leading to Denial-of-Service

A vulnerability exists in the Netskope Client Endpoint DLP driver on Windows, allowing local, authenticated users with Administrator privileges to improperly load the driver as a generic kernel service. This mismanagement triggers a null-pointer dereference, causing a system crash (Blue Screen of Death) and leading to a denial-of-service condition on the affected machine. All versions prior to R132 are vulnerable.

Impact

Exploitation of this vulnerability causes a system crash, leading to a denial-of-service condition on the affected machine.

Remediation

Netskope has released a patch for this vulnerability in version R132. Customers are advised to update to this version or later. Those using the Fail-Safe feature should update to R132.0.7 or later. Instructions for downloading the updated client are available on the Netskope Support website.