This vulnerability in CatchPulse involves improper access control that permits a local attacker without administrative privileges to connect to a kernel filter communication port that lacks restrictions. By doing so, the attacker can bypass the security policy enforcement mechanisms of CatchPulse. The CVSS 3.1 vector indicates the attack requires local access with low complexity and no user interaction, and it results in a complete compromise of integrity and availability, though confidentiality is not impacted. There is no information about affected versions or available patches.

An attacker with local, non-administrative access can bypass CatchPulse's security policies by connecting to an unrestricted kernel filter communication port. This can lead to high impact on system integrity and availability, potentially allowing unauthorized actions or denial of service. Confidentiality is not affected according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious local activity related to kernel filter communication ports.