Changing IDExpert Windows Logon Agent Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the IDExpert Windows Logon Agent, specifically in versions 2.7.3.230719 through 2.8.4.250925. This vulnerability allows unauthenticated remote attackers to compel the system to download and execute arbitrary executable files or DLLs from a remote source. The issue arises from a default configuration problem in the WinLogon installation package, which could be exploited by malicious actors.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users of the IDExpert Windows Logon Agent should immediately update to the latest version. A patch is available for download on the Changing Technology website. Instructions for applying the patch can be found in the provided README document.