Amol Dosanjh

**Name of the Vulnerable Software and Affected Versions** Trend Micro Apex One (affected versions not specified) **Description** A local attacker could exploit a LogServer link following vulnerability in Trend Micro Apex One to escalate privileges on affected installations. This issue requires the attacker to first obtain the ability to execute low-privileged code on the target system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Apex One (affected versions not specified) **Description** A local attacker could exploit a LogServer link following vulnerability in Trend Micro Apex One to escalate privileges on affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system. This issue allows a local attacker to gain elevated privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trend Micro Apex One (affected versions not specified) **Description** A local attacker could exploit a LogServer arbitrary file creation issue to escalate privileges on affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system. This issue could let a local attacker create files without permission. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Wacom Center (affected versions not specified) **Description** This issue allows local attackers to escalate privileges on affected installations of Wacom Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within WTabletServicePro.exe. By creating a symbolic link, an attacker can abuse the service to create an arbitrary file. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of SYSTEM. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Wacom Center (affected versions not specified) **Description** This issue allows local attackers to escalate privileges on affected installations of Wacom Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the WTabletServicePro process. By creating a symbolic link, an attacker can abuse the service to create a file, leveraging this issue to escalate privileges and execute arbitrary code in the context of SYSTEM. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: PaperCut NG/MF versions (affected versions not specified) Description: The issue is related to an arbitrary file deletion vulnerability in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. This vulnerability can be exploited by an attacker who obtains local login access to the Windows Server hosting PaperCut NG/MF and can execute low-privilege code directly on the server via the web-print-hot-folder. The risk is mitigated in most installations by the default Windows Server configuration, which restricts local login access to Administrators only. However, this vulnerability could pose a risk to customers who allow non-administrative users to log into the local console of the Windows environment hosting the PaperCut NG/MF application server. Recommendations: As a temporary workaround, consider restricting access to the `web-print-hot-folder` to minimize the risk of exploitation. Restrict local login access to Administrators only on the Windows Server hosting PaperCut NG/MF. Avoid allowing non-administrative users to log into the local console of the Windows environment hosting the PaperCut NG/MF application server. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Comodo Firewall (affected versions not specified) **Description** This issue allows local attackers to escalate privileges on affected installations of Comodo Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the cmdagent executable. By creating a symbolic link, an attacker can abuse the application to delete a file, which can be leveraged to escalate privileges and execute arbitrary code in the context of SYSTEM. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: PaperCut NG/MF versions with Web Print enabled Description: The issue is related to an arbitrary file creation vulnerability in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. This vulnerability exists within the web-print.exe process and can be exploited by providing a maliciously formed payload, allowing an attacker to create files that don't exist. This can lead to a Denial of Service (DoS) attack by flooding disk space. Recommendations: For PaperCut NG/MF versions with Web Print enabled, consider disabling the Web Print feature until a patch is available to prevent exploitation of the arbitrary file creation vulnerability. As a temporary workaround, restrict access to the web-print.exe process to minimize the risk of a Denial of Service (DoS) attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NETGEAR CAX30 (affected versions not specified) **Description** This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30 routers. The specific flaw exists within the `sso` binary, resulting from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of `root`. Authentication is not required to exploit this vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PaperCut NG (affected versions not specified) PaperCut MF (affected versions not specified) **Description** The issue is related to insufficient authentication procedures in PaperCut NG and PaperCut MF, allowing local attackers to escalate privileges. An attacker must have local write access to the C Drive, and Print Archiving must be enabled or the system must be misconfigured. The vulnerability exists within the pc-pdl-to-image process, which loads an executable from an unsecured location, enabling attackers to execute arbitrary code in the context of SYSTEM. **Recommendations** For PaperCut NG, ensure Print Archiving is enabled and configured according to the recommended setup procedure to mitigate the risk. As a temporary workaround, consider restricting access to the pc-pdl-to-image process until a patch is available. Avoid granting local login access to standard network users on the host server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.