Network Scanner Tool Lite DoS via Unauthenticated File Upload

Executive Summary

This vulnerability affects Network Scanner Tool and Network Scanner Tool Lite by Sharp Corporation. In their default setup, these tools allow unauthenticated connections and unlimited file uploads. Attackers can exploit this to upload malicious files or cause a denial-of-service on the affected PC.

Useful 0 Not Useful 0

Detection Guidance

Check if the Network Scanner Tool or Network Scanner Tool Lite is running on default ports without authentication. Use network scanning tools like nmap to identify open ports and services. Example command: nmap -sV <target_IP>. Inspect system processes for unexpected file uploads or high CPU usage.

Useful 0 Not Useful 0

Impact Analysis

An attacker could upload a malicious file that tricks you into executing it, potentially using your PC to attack others. Alternatively, they could flood the system with files to crash it, causing a denial-of-service.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows unauthenticated file uploads and potential denial-of-service (DoS) conditions, which could lead to unauthorized access or execution of malicious files. This may violate data protection requirements under GDPR (e.g., unauthorized data processing) and HIPAA (e.g., unauthorized access to protected health information).

Useful 0 Not Useful 0

Mitigation Strategies

Disable unauthenticated access in the Network Scanner Tool configuration. Restrict network access to the tool using firewalls. Regularly monitor for unauthorized file uploads and remove any suspicious files. Update to the latest patched version if available.

Useful 0 Not Useful 0