PT-2022-12462
CVE-2021-45912
·
تاريخ النشر
2022-01-04
·
تاريخ التحديث
2022-01-14
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Controlup Real-Time Agent versions prior to 8.5
Description
The issue concerns an unauthenticated Named Pipe channel in the Controlup Real-Time Agent, potentially allowing an attacker to run OS commands via the
ProcessActionRequest WCF method.Recommendations
For versions prior to 8.5, update to version 8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the Named Pipe channel to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾