SimpleHelp Inclusion of Functionality from Untrusted Control Sphere Vulnerability

A vulnerability allowing arbitrary code execution has been identified in SimpleHelp versions prior to 5.5.12. This issue arises from the inclusion of functionality from an untrusted control sphere, which can be exploited to induce a client to execute unauthorized code.

Impact

Exploitation of this vulnerability allows for complete compromise of remote machines, enabling an unauthenticated attacker to execute arbitrary code on the affected system.

Remediation

Users are advised to upgrade to SimpleHelp version 5.5.12 or later.