CVE-2021-27193

Netop Vision Pro (up to 9.7.1) suffers CVE-2021-27193 via the MChat plugin: an Access Control Error that lets an unauthenticated remote attacker read and write files in the remote work directory with System privileges, enabling privilege escalation and potential remote code execution. The Trellix...

CVE-2021-27195

CVE-2021-27195 (Netop Vision Pro) is an Improper Authorization flaw that enables replay of authenticated teacher traffic to execute commands on student hosts. McAfee/ThreatPost: attackers can emulate a teacher, replay modified local network traffic, and perform remote command execution with Syste...

CVE-2021-27194

Netop Vision Pro (up to version 9.7.1) is affected by CVE-2021-27194, a vulnerability where all network traffic, including Windows credentials and screenshots, is transmitted in plaintext over local networks. Exploitation does not require authentication and can enable an attacker to eavesdrop on ...

CVE-2021-36134

Netop Vision Pro

CVE-2021-27192

CVE-2021-27192 describes a local privilege escalation in Windows clients of Netop Vision Pro up to version 9.7.1 that allow a local user to gain administrator/System privileges while using the client. Connected sources detail multiple related issues in the same release family: CVE-2021-27192 ( pr...