Improper Access Control in TXOne Networks Products

Executive Summary

This vulnerability is an improper access control issue in TXOne Networks products that allows a local attacker with admin privileges to bypass file lockdown mechanisms on removable media. The attacker must first place an unauthorized file on the media before exploiting the flaw to transfer it to a victim device.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability requires local administrator access and involves removable media validation bypass. Detection may involve checking installed versions of SafePortAgent and StellarProtect against vulnerable ranges. Review removable media access logs for unauthorized file transfers or bypass attempts.

Useful 0 Not Useful 0

Impact Analysis

If you use affected TXOne Networks products (SafePortAgent before 3.2.5024 or StellarProtect between 3.2.4011 and 5.0.1083), an attacker could bypass security controls and transfer malicious files to your system via removable media, potentially leading to system compromise or data breaches.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized file transfers, potentially violating data protection requirements under GDPR or HIPAA by allowing unauthorized access to sensitive data. Organizations using affected products may face compliance risks if the flaw enables data breaches.

Useful 0 Not Useful 0

Mitigation Strategies

Update SafePortAgent to version 3.2.5024 or later and StellarProtect to version 5.0.1083 or later to address the improper access control vulnerability in the Removable Media Validation function.

Useful 0 Not Useful 0