Masahiro Iida

**Nome do Software Vulnerável e Versões Afetadas** ExpressUpdate Agent for Windows (versões afetadas não especificadas) **Description** Existe uma deficiência de controle de acesso no software. Esta falha permite que um usuário mal-intencionado que tenha obtido acesso ao produto execute código arbitrário com privilégios de SYSTEM, que são o nível mais alto de permissões em um sistema operacional Windows. **Recommendations** No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade.

**Nome do Software Vulnerável e Versões Afetadas** ServerView Agents for Windows versões anteriores a 11.60.05 **Descrição** Um problema de encadenamento de privilégios permite que um atacante local autenticado que tenha feito login no servidor eleve seus privilégios para o nível SYSTEM. **Recomendações** Atualize o ServerView Agents for Windows para a versão 11.60.05 ou posterior.

**Nome do Software Vulnerável e Versões Afetadas** ServerView Agents for Windows versões anteriores a 11.60.05 **Descrição** Uma atribuição incorreta de permissões para um recurso crítico permite que um invasor local autenticado obtenha privilégios de SYSTEM no servidor onde o software está instalado. **Recomendações** Atualize o ServerView Agents for Windows para a versão 11.60.05 ou posterior.

**Name of the Vulnerable Software and Affected Versions** ELECOM wireless LAN access point devices (affected versions not specified) **Description** A stack-based buffer overflow exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Nome do Software Vulnerável e Versões Afetadas** CL4/6NX Plus e CL4/6NX-J Plus (modelo do Japão) versões anteriores à 1.15.5-r1 **Descrição** Existe uma vulnerabilidade de injeção de comandos do SO que permite a execução de comandos arbitrários do SO no sistema com determinados privilégios de usuário não administrativo. **Recomendações** Atualize para a versão do firmware 1.15.5-r1 ou posterior.

**Nome do Software Vulnerável e Versões Afetadas** Versões do CL4/6NX Plus anteriores à 1.15.5-r1 Versões do CL4/6NX-J Plus (modelo do Japão) anteriores à 1.15.5-r1 **Descrição** Os dispositivos CL4/6NX Plus e CL4/6NX-J Plus estão suscetíveis à execução arbitrária de scripts Lua. Isso ocorre devido à capacidade de enviar arquivos perigosos manipulados. A exploração bem-sucedida permite a execução de scripts Lua com privilégios de root no sistema. **Recomendações** Atualize o CL4/6NX Plus para a versão de firmware 1.15.5-r1 ou posterior. Atualize o CL4/6NX-J Plus (modelo do Japão) para a versão de firmware 1.15.5-r1 ou posterior.

Nome do software vulnerável e versões afetadas: Microsoft Outlook para iOS (versões afetadas não especificadas) Descrição: O problema está relacionado a uma falha na autorização no cliente de e-mail Microsoft Outlook para iOS. A exploração dessa falha pode permitir que um invasor remoto divulgue informações protegidas. Recomendações: No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** BUFFALO VR-S1000 versions 2.37 and earlier **Description** The issue allows a network-adjacent unauthenticated attacker who can access the product's web management page to obtain sensitive information. **Recommendations** For versions 2.37 and earlier, update to a version later than 2.37 to resolve the issue. As a temporary workaround, consider restricting access to the web management page until a patch is available.

**Name of the Vulnerable Software and Affected Versions** ELECOM WRC-1167GHBK-S versions v1.03 and earlier ELECOM WRC-1167GEBK-S versions v1.03 and earlier ELECOM WRC-1167FEBK-S versions v1.04 and earlier ELECOM WRC-1167GHBK3-A versions v1.24 and earlier ELECOM WRC-1167FEBK-A versions v1.18 and earlier **Description** A code injection issue in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute arbitrary code by sending a specially crafted request. **Recommendations** For ELECOM WRC-1167GHBK-S versions v1.03 and earlier, update to a version later than v1.03 to resolve the issue. For ELECOM WRC-1167GEBK-S versions v1.03 and earlier, update to a version later than v1.03 to resolve the issue. For ELECOM WRC-1167FEBK-S versions v1.04 and earlier, update to a version later than v1.04 to resolve the issue. For ELECOM WRC-1167GHBK3-A versions v1.24 and earlier, update to a version later than v1.24 to resolve the issue. For ELECOM WRC-1167FEBK-A versions v1.18 and earlier, update to a version later than v1.18 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** AC-PD-WAPU versions 1.05 B04 and earlier AC-PD-WAPUM versions 1.05 B04 and earlier AC-PD-WAPU-P versions 1.05 B04P and earlier AC-PD-WAPUM-P versions 1.05 B04P and earlier AC-WAPU-300 versions 1.00 B07 and earlier AC-WAPUM-300 versions 1.00 B07 and earlier AC-WAPU-300-P versions 1.00 B07 and earlier AC-WAPUM-300-P versions 1.00 B07 and earlier **Description** An OS command injection vulnerability exists in Wi-Fi AP UNIT, allowing a remote authenticated attacker with administrative privilege to execute an arbitrary OS command. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AC-PD-WAPU versions 1.05 B04 and earlier AC-PD-WAPUM versions 1.05 B04 and earlier AC-PD-WAPU-P versions 1.05 B04P and earlier AC-PD-WAPUM-P versions 1.05 B04P and earlier AC-WAPU-300 versions 1.00 B07 and earlier AC-WAPUM-300 versions 1.00 B07 and earlier AC-WAPU-300-P versions 1.00 B07 and earlier AC-WAPUM-300-P versions 1.00 B07 and earlier **Description** The issue is related to missing authentication for a critical function in Wi-Fi AP UNIT, allowing a remote unauthenticated attacker to obtain sensitive information of the affected products. **Recommendations** For AC-PD-WAPU versions 1.05 B04 and earlier, update to a version later than 1.05 B04. For AC-PD-WAPUM versions 1.05 B04 and earlier, update to a version later than 1.05 B04. For AC-PD-WAPU-P versions 1.05 B04P and earlier, update to a version later than 1.05 B04P. For AC-PD-WAPUM-P versions 1.05 B04P and earlier, update to a version later than 1.05 B04P. For AC-WAPU-300 versions 1.00 B07 and earlier, update to a version later than 1.00 B07. For AC-WAPUM-300 versions 1.00 B07 and earlier, update to a version later than 1.00 B07. For AC-WAPU-300-P versions 1.00 B07 and earlier, update to a version later than 1.00 B07. For AC-WAPUM-300-P versions 1.00 B07 and earlier, update to a version later than 1.00 B07.

**Name of the Vulnerable Software and Affected Versions** JINS MEME CORE Firmware versions 2.2.0 and earlier **Description** The issue is related to a hard-coded cryptographic key used in the firmware, which may allow a network-adjacent attacker to decrypt data acquired by a sensor of the affected product. **Recommendations** For JINS MEME CORE Firmware versions 2.2.0 and earlier, update to a version that does not use a hard-coded cryptographic key to prevent potential decryption of sensor-acquired data by a network-adjacent attacker. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PIX-RT100 versions RT100 TEQ 2.1.1 EQ101 through RT100 TEQ 2.1.2 EQ101 **Description** The issue concerns a hidden functionality vulnerability that enables a network-adjacent attacker to access the product. This access is achieved through undocumented Telnet or SSH services. **Recommendations** For PIX-RT100 versions RT100 TEQ 2.1.1 EQ101 through RT100 TEQ 2.1.2 EQ101, consider disabling the undocumented Telnet and SSH services as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** PIX-RT100 versions RT100 TEQ 2.1.1 EQ101 and RT100 TEQ 2.1.2 EQ101 **Description** The issue allows a network-adjacent attacker who can access product settings to execute an arbitrary OS command. This is an OS command injection vulnerability. **Recommendations** For PIX-RT100 version RT100 TEQ 2.1.1 EQ101, update to a version that fixes the OS command injection vulnerability. For PIX-RT100 version RT100 TEQ 2.1.2 EQ101, update to a version that fixes the OS command injection vulnerability. As a temporary workaround, consider restricting access to product settings to minimize the risk of exploitation.