RSUPPORT RemoteView PC Application Console Uncontrolled Search Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability allowing arbitrary code execution exists in RemoteView PC Application Console versions prior to 6.0.2. This issue arises from an uncontrolled search path element vulnerability, where a crafted DLL placed in the same folder as the application can be executed.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the user's system.

Remediation

Users of RemoteView PC Application Console should note that the service was terminated on January 31, 2023. For those using RemoteCall Remote Support Program (for Operator), versions 5.1.0 and 5.3.0 are available as updates.