PT-2019-9271 · Poweract · Poweract Pro Master Agent For Windows

Akane + 1 · Published 2019-03-27 · Updated 2019-10-03 · CVE-2018-16207

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions PowerAct Pro Master Agent for Windows versions 5.13 and earlier

Description The issue allows authenticated attackers to bypass access restrictions, enabling them to alter or edit unauthorized files. The exact vectors used for this bypass are not specified.

Recommendations For PowerAct Pro Master Agent for Windows versions 5.13 and earlier, update to a version later than 5.13 to resolve the issue.

Fix

Related Identifiers

CVE-2018-16207

Affected Products

Poweract Pro Master Agent For Windows

References · 5

• https://oss.omron.co.jp/ups/info/topics/190326.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-16207 · Security Note
• https://osv.dev/vulnerability/CVE-2018-16207 · Vendor Advisory
• https://oss.omron.co.jp/ups/support/download/soft/poweractpro/master/poweractpro_master_windows.html · Note
• https://jvn.jp/en/jp/JVN63981842/index.html · Note