Vulnerability-Lookup

CNVD-2020-03064

Vulnerability from cnvd - Published: 2020-01-21

Title

MOTEX LanScope Cat和LanScope An存在未明漏洞

Description

OTEX LanScope Cat和LanScope An都是日本MOTEX公司的产品。LanScope Cat是一套资产监控和管理软件。LanScope An是一款智能设备管理工具。 MOTEX LanScope An和LanScope Cat中存在安全漏洞。攻击者可利用该漏洞获取未授权的权限并执行任意代码。

Severity

高

Patch Name

MOTEX LanScope Cat和LanScope An存在未明漏洞的补丁

Patch Description

OTEX LanScope Cat和LanScope An都是日本MOTEX公司的产品。LanScope Cat是一套资产监控和管理软件。LanScope An是一款智能设备管理工具。 MOTEX LanScope An和LanScope Cat中存在安全漏洞。攻击者可利用该漏洞获取未授权的权限并执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已提供漏洞修补方案，请关注厂商主页及时更新： https://jvn.jp/en/jp/JVN49068796/

Reference

https://jvn.jp/en/jp/JVN49068796/

Impacted products

Name
['MOTEX LanScope An <2.7.7.0', 'MOTEX LanScope An <3.0.8.1', 'MOTEX LanScope Cat <9.2.1.0', 'MOTEX LanScope Cat <9.2.2.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-6026"
    }
  },
  "description": "OTEX LanScope Cat\u548cLanScope An\u90fd\u662f\u65e5\u672cMOTEX\u516c\u53f8\u7684\u4ea7\u54c1\u3002LanScope Cat\u662f\u4e00\u5957\u8d44\u4ea7\u76d1\u63a7\u548c\u7ba1\u7406\u8f6f\u4ef6\u3002LanScope An\u662f\u4e00\u6b3e\u667a\u80fd\u8bbe\u5907\u7ba1\u7406\u5de5\u5177\u3002\n\nMOTEX LanScope An\u548cLanScope Cat\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u672a\u6388\u6743\u7684\u6743\u9650\u5e76\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "formalWay": "\u5382\u5546\u5df2\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u8865\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u53ca\u65f6\u66f4\u65b0\uff1a\r\nhttps://jvn.jp/en/jp/JVN49068796/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-03064",
  "openTime": "2020-01-21",
  "patchDescription": "OTEX LanScope Cat\u548cLanScope An\u90fd\u662f\u65e5\u672cMOTEX\u516c\u53f8\u7684\u4ea7\u54c1\u3002LanScope Cat\u662f\u4e00\u5957\u8d44\u4ea7\u76d1\u63a7\u548c\u7ba1\u7406\u8f6f\u4ef6\u3002LanScope An\u662f\u4e00\u6b3e\u667a\u80fd\u8bbe\u5907\u7ba1\u7406\u5de5\u5177\u3002\r\n\r\nMOTEX LanScope An\u548cLanScope Cat\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u672a\u6388\u6743\u7684\u6743\u9650\u5e76\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "MOTEX LanScope Cat\u548cLanScope An\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "MOTEX LanScope An \u003c2.7.7.0",
      "MOTEX LanScope An \u003c3.0.8.1",
      "MOTEX LanScope Cat \u003c9.2.1.0",
      "MOTEX LanScope Cat \u003c9.2.2.0"
    ]
  },
  "referenceLink": "https://jvn.jp/en/jp/JVN49068796/",
  "serverity": "\u9ad8",
  "submitTime": "2019-12-03",
  "title": "MOTEX LanScope Cat\u548cLanScope An\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}

CVE-2019-6026 (GCVE-0-2019-6026)

Vulnerability from cvelistv5 – Published: 2019-12-26 15:16 – Updated: 2024-08-04 20:16

Summary

Privilege escalation vulnerability in Multiple MOTEX products (LanScope Cat client program (MR) and LanScope Cat client program (MR)LanScope Cat detection agent (DA) prior to Ver.9.2.1.0, LanScope Cat server monitoring agent (SA, SAE) prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 (LanScope An 2 series), and LanScope An prior to Ver 3.0.8.1 (LanScope An 3 series)) allow authenticated attackers to obtain unauthorized privileges and execute arbitrary code.

Severity ?

No CVSS data available.

CWE

Privilege escalation

Assigner

jpcert

References

URL

Tags

	https://www.motex.co.jp/news/news_topics/2019/rel…	x_refsource_MISC
	http://jvn.jp/en/jp/JVN49068796/index.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	MOTEX.Inc	Multiple MOTEX products	Affected: LanScope Cat client program (MR) and LanScope Cat client program (MR)LanScope Cat detection agent (DA) prior to Ver.9.2.1.0, LanScope Cat server monitoring agent (SA, SAE) prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 (LanScope An 2 series), and LanScope An prior to Ver 3.0.8.1 (LanScope An 3 series)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:16:24.365Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.motex.co.jp/news/news_topics/2019/release191202/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN49068796/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Multiple MOTEX products",
          "vendor": "MOTEX.Inc",
          "versions": [
            {
              "status": "affected",
              "version": "LanScope Cat client program (MR) and LanScope Cat client program (MR)LanScope Cat detection agent (DA) prior to Ver.9.2.1.0, LanScope Cat server monitoring agent (SA, SAE) prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 (LanScope An 2 series), and LanScope An prior to Ver 3.0.8.1 (LanScope An 3 series)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Privilege escalation vulnerability in Multiple MOTEX products (LanScope Cat client program (MR) and LanScope Cat client program (MR)LanScope Cat detection agent (DA) prior to Ver.9.2.1.0, LanScope Cat server monitoring agent (SA, SAE) prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 (LanScope An 2 series), and LanScope An prior to Ver 3.0.8.1 (LanScope An 3 series)) allow authenticated attackers to obtain unauthorized privileges and execute arbitrary code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Privilege escalation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-26T15:16:50",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.motex.co.jp/news/news_topics/2019/release191202/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://jvn.jp/en/jp/JVN49068796/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2019-6026",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Multiple MOTEX products",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "LanScope Cat client program (MR) and LanScope Cat client program (MR)LanScope Cat detection agent (DA) prior to Ver.9.2.1.0, LanScope Cat server monitoring agent (SA, SAE) prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 (LanScope An 2 series), and LanScope An prior to Ver 3.0.8.1 (LanScope An 3 series)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "MOTEX.Inc"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Privilege escalation vulnerability in Multiple MOTEX products (LanScope Cat client program (MR) and LanScope Cat client program (MR)LanScope Cat detection agent (DA) prior to Ver.9.2.1.0, LanScope Cat server monitoring agent (SA, SAE) prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 (LanScope An 2 series), and LanScope An prior to Ver 3.0.8.1 (LanScope An 3 series)) allow authenticated attackers to obtain unauthorized privileges and execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Privilege escalation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.motex.co.jp/news/news_topics/2019/release191202/",
              "refsource": "MISC",
              "url": "https://www.motex.co.jp/news/news_topics/2019/release191202/"
            },
            {
              "name": "http://jvn.jp/en/jp/JVN49068796/index.html",
              "refsource": "MISC",
              "url": "http://jvn.jp/en/jp/JVN49068796/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2019-6026",
    "datePublished": "2019-12-26T15:16:50",
    "dateReserved": "2019-01-10T00:00:00",
    "dateUpdated": "2024-08-04T20:16:24.365Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2020-03064

CVE-2019-6026 (GCVE-0-2019-6026)

Tags

Sightings

Nomenclature