TEC-IT TBarCode ActiveX Control Remote File Creation Vulnerability

A vulnerability exists in the TEC-IT TBarCode ActiveX control version 11.15, specifically in its licensing management via INI files. This flaw allows for remote file creation on the host system. Depending on the file's destination and name, this could lead to unauthorized code execution or file persistence within the context of the process running TBarCode.

Impact

Exploitation of this vulnerability could result in unauthorized file creation on the host system, with potential for executing malicious code or maintaining persistence through the created files.

Remediation

Users can update to TEC-IT TBarCode version 11.15.1, which addresses this vulnerability.