SIOS Technology Quick Agent V2 and V3 Improper Access Control Vulnerability Allowing Arbitrary Host Login
Vulnerability
An improper access control vulnerability has been identified in Quick Agent V2 and V3, prior to the latest versions. This vulnerability allows remote unauthenticated attackers to attempt to log in to arbitrary hosts via the Windows system where Quick Agent is installed.
Impact
Exploitation of this vulnerability could lead to unauthorized login attempts on arbitrary hosts through the Windows system running Quick Agent.
Remediation
Users are advised to update Quick Agent to the latest version. Quick Agent V3 users should update to version 3.2.1 or later, and Quick Agent V2 users should update to version 2.9.8 or later. The latest versions can be downloaded from the SIOS Technology MFP Support Site.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.