Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system. An authenticated attacker can, by modifying %SYSTEMDRIVE%\IXP\SW\[PACKAGE_CODE]\EveryLogon.bat, achieve this movement and execute code in the context of other users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IXP EasyInstall 输入验证错误漏洞
Vulnerability Description
IXP EasyInstall 6.2.13723版本中的客户端安装目录存在输入验证错误漏洞，该漏洞源于访问控制不当。本地攻击者可借助特制EveryLogon.bat文件利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A