PT-2017-11526
CVE-2017-10818
·
Published
2017-08-04
·
Updated
2021-05-19
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MaLion for Windows and Mac versions 3.2.1 through 5.2.1
Description
The issue concerns a hardcoded cryptographic key in MaLion, which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service.
Recommendations
For MaLion for Windows and Mac versions 3.2.1 through 5.2.1, consider updating to a version that does not use a hardcoded cryptographic key to prevent potential exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾