CVE-2021-20674

Name of the Vulnerable Software and Affected Versions: MagicConnect Client program versions prior to 2021 March 1

Description: The issue allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer when a terminal is connected remotely using Remote desktop. This is achieved via a Trojan horse DLL in an unspecified directory.

Recommendations: For MagicConnect Client program versions prior to 2021 March 1, update to a version distributed after 2021 March 1 to resolve the issue.