Alejandro Baño Andrés

**Name of the Vulnerable Software and Affected Versions** Advanced IP Scanner (affected versions not specified) Advanced Port Scanner (affected versions not specified) **Description** The issue involves the unauthorized exposure of confidential information when the applications initiate a network scan, sending the NTLM hash of the user performing the scan. This can be exploited by intercepting network traffic to a legitimate server or by setting up a fake server, affecting both local and remote scenarios, and is relevant for both HTTP/HTTPS and SMB protocols. **Recommendations** For Advanced IP Scanner, consider restricting the use of the network scan feature until a fix is available. For Advanced Port Scanner, avoid using the network scan functionality until the issue is resolved. As a temporary workaround, consider disabling the network scan feature in both applications to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: LaborOfficeFree version 19.10 Description: The issue is related to inadequate access control in the backup directory of LaborOfficeFree, allowing any authenticated user to read backup files in the directory '%programfiles(x86)% LaborOfficeFree BackUp'. This could potentially lead to the disclosure of protected information. Recommendations: For version 19.10, consider restricting access to the backup directory '%programfiles(x86)% LaborOfficeFree BackUp' to prevent unauthorized users from reading sensitive files. As a temporary workaround, limit the permissions of authenticated users to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** LaborOfficeFree version 19.10 **Description** The issue affects the executable files LOF service.exe and LaborOfficeFree.exe, allowing an attacker to read and extract the username and password from the database. This can lead to unauthorized access to the application's database backup. The attacker can log in remotely with root-like privileges. **Recommendations** For version 19.10, consider disabling the executable files LOF service.exe and LaborOfficeFree.exe until a patch is available to prevent exploitation. Restrict access to the directory '%programfiles(x86)%LaborOfficeFree' to minimize the risk of unauthorized access. Avoid using the default credentials for the database to reduce the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LaborOfficeFree version 19.10 **Description** The issue is related to a weak MySQL database root password in LaborOfficeFree. This allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants. The vulnerability is associated with weak password requirements. Exploitation of this issue may enable an attacker to obtain the root password of the MySQL database. **Recommendations** For LaborOfficeFree version 19.10, consider changing the MySQL database root password to a stronger one to prevent exploitation. As a temporary workaround, restrict access to the MySQL database until a more secure password is implemented.

**Name of the Vulnerable Software and Affected Versions** LaborOfficeFree version 19.10 **Description** The issue is related to weak password requirements in LaborOfficeFree, which can be exploited to perform a brute force attack. This allows an attacker to easily discover the root password of the MySQL database. **Recommendations** For version 19.10, update the MySQL database root password to a stronger one to prevent brute force attacks. As a temporary workaround, consider restricting access to the MySQL database to minimize the risk of exploitation.