JVN#49068796: Multiple MOTEX products vulnerable to privilege escalation

LanScope Cat and LanScope An provided by MOTEX Inc. contain a privilege escalation vulnerability.

Impact

An user who can login to the PC where the vulnerable product is installed may obtain unauthorized privileges and execute arbitrary code.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• LanScope Cat prior to Ver.9.2.1.0
  • LanScope Cat client program (MR)
  • LanScope Cat detection agent (DA)
• LanScope Cat prior to Ver.9.2.2.0
  • LanScope Cat server monitoring agent (SA, SAE)
• LanScope An prior to Ver 2.7.7.0 (LanScope An 2 series)
• LanScope An prior to Ver 3.0.8.1 (LanScope An 3 series)