PT-2019-17951 · Motex · Lanscope Cat+1

Mitch + 2 · Publicado 2019-12-26 · Atualizado 2020-08-24 · CVE-2019-6026

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LanScope Cat client program (MR) versions prior to 9.2.1.0 LanScope Cat detection agent (DA) versions prior to 9.2.1.0 LanScope Cat server monitoring agent (SA, SAE) versions prior to 9.2.2.0 LanScope An 2 series versions prior to 2.7.7.0 LanScope An 3 series versions prior to 3.0.8.1

Description A privilege escalation issue in Multiple MOTEX products allows authenticated attackers to obtain unauthorized privileges and execute arbitrary code.

Recommendations For LanScope Cat client program (MR) versions prior to 9.2.1.0, update to version 9.2.1.0 or later. For LanScope Cat detection agent (DA) versions prior to 9.2.1.0, update to version 9.2.1.0 or later. For LanScope Cat server monitoring agent (SA, SAE) versions prior to 9.2.2.0, update to version 9.2.2.0 or later. For LanScope An 2 series versions prior to 2.7.7.0, update to version 2.7.7.0 or later. For LanScope An 3 series versions prior to 3.0.8.1, update to version 3.0.8.1 or later.

Correção

Identificadores relacionados

CVE-2019-6026

Produtos afetados

Lanscope An

Lanscope Cat

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-6026 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-6026 · Aviso do Fabricante
• https://motex.co.jp/news/news_topics/2019/release191202 · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN49068796/index.html · Nota