TR-VISION HOMEに権限不備の脆弱性、修正版は未確認
Summary
rmalright製のTR-VISION HOME 2.0.5で、ドライバーWFanManager.sysの権限設定の不備による脆弱性が公表されました。利用中の組織は端末の版を確認し、不要な端末では削除を検討してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
rmalright製のTR-VISION HOME 2.0.5で、ドライバーWFanManager.sysの権限設定の不備による脆弱性が公表されました。利用中の組織は端末の版を確認し、不要な端末では削除を検討してください。
Original description The description as published by the source.
A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub_11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com
- web nvd.nist.gov
- web github.com