PT-2019-17951 · Motex · Lanscope Cat+1

Mitch + 2 · Published 2019-12-26 · Updated 2020-08-24 · CVE-2019-6026

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LanScope Cat client program (MR) versions prior to 9.2.1.0 LanScope Cat detection agent (DA) versions prior to 9.2.1.0 LanScope Cat server monitoring agent (SA, SAE) versions prior to 9.2.2.0 LanScope An 2 series versions prior to 2.7.7.0 LanScope An 3 series versions prior to 3.0.8.1

Description A privilege escalation issue in Multiple MOTEX products allows authenticated attackers to obtain unauthorized privileges and execute arbitrary code.

Recommendations For LanScope Cat client program (MR) versions prior to 9.2.1.0, update to version 9.2.1.0 or later. For LanScope Cat detection agent (DA) versions prior to 9.2.1.0, update to version 9.2.1.0 or later. For LanScope Cat server monitoring agent (SA, SAE) versions prior to 9.2.2.0, update to version 9.2.2.0 or later. For LanScope An 2 series versions prior to 2.7.7.0, update to version 2.7.7.0 or later. For LanScope An 3 series versions prior to 3.0.8.1, update to version 3.0.8.1 or later.

Fix

Related Identifiers

CVE-2019-6026

Affected Products

Lanscope An

Lanscope Cat

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-6026 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6026 · Vendor Advisory
• https://motex.co.jp/news/news_topics/2019/release191202 · Vendor Advisory
• http://jvn.jp/en/jp/JVN49068796/index.html · Note