Proget Konsola Remote Access Vulnerability via Malicious CSV Files

A vulnerability exists in Proget Konsola, part of the Proget Mobile Device Management (MDM) suite, allowing high-privileged users to download data related to new device activations as a CSV file. This file, when opened in Microsoft Excel, could corrupt the user's PC and potentially lead to unauthorized remote access. The vulnerability affects all Proget versions prior to 2.17.5.

Impact

Exploitation of this vulnerability could result in remote access to the user's PC.

Remediation

Users can update to Proget version 2.17.5 or later to address this vulnerability.