Executive Summary

iMonitor EAM 9.6394 includes default administrative credentials that are visible in the management client's connection dialog. If these default credentials are not changed by the administrator, a remote attacker can use them to authenticate to the EAM server. This allows the attacker to gain full control over all monitored agents and data, including the ability to read sensitive telemetry such as keylogger output and to issue arbitrary commands to all connected clients.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow a remote attacker to take full control of the EAM server and all connected clients. The attacker can access highly sensitive data, including keylogger outputs, and perform arbitrary actions on all monitored agents. This can lead to severe privacy breaches, data theft, unauthorized surveillance, and potential manipulation or disruption of client systems.

Useful 0 Not Useful 0

Mitigation Strategies

The immediate step to mitigate this vulnerability is to change the default administrative credentials on the iMonitor EAM 9.6394 server to strong, unique passwords. This prevents remote attackers from authenticating using the default credentials and gaining full control over monitored agents and data.

Useful 0 Not Useful 0