NetSight
high8.1

CVE-2018-13012

Download of code with improper integrity check in snsupd.exe and upd.exe in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and Soft…

Impact

Download of code with improper integrity check in snsupd.exe and upd.exe in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.12 allows the remote attacker to execute unauthorized code by substituting a forged update server.

Affected products

VendorProductAffected versions
SafensoftSoftcontrol Enterprise Suite
before 4.4.12
SafensoftSoftcontrol Syswatch
before 4.4.12
SafensoftSoftcontrol Tpsecure
before 4.4.12

Weakness classification

References