Accops HyWorks Client for Windows: version v3.2.8.180 or older.NoMachine, above v4.0.346 below v.7.7.4 (v.6.x is being updated as well).Amazon AppStream client version below: 1.1.304, 2.Amazon NICE DCV, below: 20 (Windows), 20 (Linux), 20 (Mac), 0.
ELTIMA USB NETWORK GATE 8 UPGRADE
However, it is now up to cloud services to upgrade their software to utilize the updated Eltima SDK.Īccording to SentinelOne, the affected software and cloud platforms are: These vulnerabilities have been responsibly disclosed to Eltima, who has already released fixes for affected versions. This elevated access could allow malware to steal credentials that threat actors can use to breach an organization's internal network.
"These vulnerabilities allow attackers to escalate privileges enabling them to disable security products, overwrite system components, corrupt the operating system, or perform malicious operations unimpeded," explained a new report by Sentinel Labs. The implications of exploiting the flaws are significant as they could allow remote threat actors to gain elevated access on a cloud desktop to run code in kernel mode. However, as cloud desktop providers, including Amazon Workspaces, rely on tools like Eltima, SentinelOne warned that millions of users worldwide have become exposed to the discovered vulnerabilities.
0 kommentar(er)
