SIOS Technology Quick Agent V2 and V3 Path Traversal Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A path traversal vulnerability has been identified in Quick Agent V2 and V3, prior to the latest versions. This vulnerability allows remote, unauthenticated attackers to execute arbitrary code with Windows system privileges on the affected machine. Quick Agent is a Windows application used for scanning solutions on certain Ricoh multifunction printers.
Impact
Exploitation of this vulnerability could lead to arbitrary code execution on the affected system with Windows system privileges.
Remediation
Users are advised to update Quick Agent to the latest version. Quick Agent V3 users should update to version 3.2.1 or later, and Quick Agent V2 users should update to version 2.9.8 or later. The latest versions can be downloaded from the SIOS MFP Support Site.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.