Florian Bogner

Name of the Vulnerable Software and Affected Versions: Securepoint SSL VPN Client versions prior to 2.0.32 Description: The issue concerns unsafe configuration handling that enables local privilege escalation to NT AUTHORITYSYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under "%APPDATA%Securepoint SSL VPN" and add an external script file that is executed as a privileged user. Recommendations: For versions prior to 2.0.32, update to version 2.0.32 or later to resolve the issue. As a temporary workaround, consider restricting access to the OpenVPN configuration stored under "%APPDATA%Securepoint SSL VPN" to prevent non-privileged users from modifying it. Additionally, avoid using external script files in the OpenVPN configuration until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Rapid7 Insight Agent versions 2.6.3 and prior **Description** The issue is related to an uncontrolled DLL search path, allowing a malicious local user to elevate to SYSTEM privileges. This occurs when the Python interpreter attempts to load python3.dll from a writable location, specifically "C:DLLspython3.dll". **Recommendations** For Rapid7 Insight Agent versions 2.6.3 and prior, update to version 2.6.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** GSI WiNPAT Portal versions 3.2.0.1001 through 3.6.1.0 **Description** The issue allows remote attackers to execute arbitrary SQL commands via the `username` field in the login form. **Recommendations** For versions 3.2.0.1001 through 3.6.1.0, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** HiSuite version 4.0.5.300 OVE **Description** The issue is related to an information leak. An attacker with system login capabilities can exploit this to copy the user's proxy password, resulting in information leaks. **Recommendations** For HiSuite version 4.0.5.300 OVE, consider restricting access to sensitive information and system login to minimize the risk of exploitation until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Huawei HiSuite version 4.0.5.300 OVE **Description** The issue concerns the use of insecure HTTP for software package downloads and the lack of integrity checks on the downloaded packages. This allows an attacker to potentially launch a Man-In-The-Middle (MITM) attack, interrupting or replacing the software package, which could further compromise the PC. **Recommendations** For Huawei HiSuite version 4.0.5.300 OVE, consider disabling the automatic software update feature until a secure update mechanism is implemented. Restrict access to the upgrade software package download feature to minimize the risk of exploitation. Avoid using insecure HTTP connections for software package downloads; instead, use a secure connection such as HTTPS. As a temporary workaround, manually verify the integrity of the software package before installing it. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Huawei HiSuite version 4.0.5.300 OVE **Description** The issue is related to a dynamic link library (DLL) hijack, where an attacker can make the system load malicious DLL files to execute arbitrary code. **Recommendations** For version 4.0.5.300 OVE, at the moment, there is no information about a newer version that contains a fix for this vulnerability.