CVE-2020-14011

Name of the Vulnerable Software and Affected Versions Lansweeper versions 6.0.x through 7.2.x

Description The issue concerns a default installation setting where the admin password is configured for the admin account, unless the "Built-in admin" option is manually unchecked. This configuration allows for command execution through the Add New Package and Scheduled Deployments features.

Recommendations For Lansweeper versions 6.0.x through 7.2.x, manually uncheck the "Built-in admin" option during installation to prevent the default admin password configuration. As a temporary workaround, consider restricting access to the Add New Package and Scheduled Deployments features until the issue is resolved.