PT-2018-8979 · Yayoi · Yayoi Kokyaku Kanri 17+5
Eiji James Yoshida
·
Published
2018-09-07
·
Updated
2018-10-30
·
CVE-2018-0623
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Yayoi Kaikei 17 Series versions 23.1.1 and earlier
Yayoi Aoiro Shinkoku 17 versions 23.1.1 and earlier
Yayoi Kyuuyo 17 versions 20.1.4 and earlier
Yayoi Kyuuyo Keisan 17 versions 20.1.4 and earlier
Yayoi Hanbai 17 Series versions 20.0.2 and earlier
Yayoi Kokyaku Kanri 17 versions 11.0.2 and earlier
Description
The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This flaw exists within the handling of
msjet49.dll loaded by the vulnerable products.Recommendations
For Yayoi Kaikei 17 Series versions 23.1.1 and earlier, consider restricting access to the directory where
msjet49.dll is loaded until a patch is available.
For Yayoi Aoiro Shinkoku 17 versions 23.1.1 and earlier, consider restricting access to the directory where msjet49.dll is loaded until a patch is available.
For Yayoi Kyuuyo 17 versions 20.1.4 and earlier, consider restricting access to the directory where msjet49.dll is loaded until a patch is available.
For Yayoi Kyuuyo Keisan 17 versions 20.1.4 and earlier, consider restricting access to the directory where msjet49.dll is loaded until a patch is available.
For Yayoi Hanbai 17 Series versions 20.0.2 and earlier, consider restricting access to the directory where msjet49.dll is loaded until a patch is available.
For Yayoi Kokyaku Kanri 17 versions 11.0.2 and earlier, consider restricting access to the directory where msjet49.dll is loaded until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Untrusted Search Path
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Yayoi Aoiro Shinkoku 17
Yayoi Hanbai 17 Series
Yayoi Kaikei 17 Series
Yayoi Kokyaku Kanri 17
Yayoi Kyuuyo 17
Yayoi Kyuuyo Keisan 17