CVE-2021-45912

Name of the Vulnerable Software and Affected Versions Controlup Real-Time Agent versions prior to 8.5

Description The issue concerns an unauthenticated Named Pipe channel in the Controlup Real-Time Agent, potentially allowing an attacker to run OS commands via the ProcessActionRequest WCF method.

Recommendations For versions prior to 8.5, update to version 8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the Named Pipe channel to minimize the risk of exploitation.