Notification

Icon
Error

7-Zip Arbitrary Code Execution Vulnerability

Posted: Friday, May 4, 2018 2:19:34 PM(UTC)
Esben.D

Esben.D

Member Administration Original PosterPosts: 1,982
6
Like
An arbitrary code execution vulnerability has recently been discovered in 7-Zip. By exploiting this arbitrary code execution, depending on the privileges of the user, an attacker can install programs; view, change, or delete data; or create new accounts with full user rights.
This topic outlines how you can deploy the fixed 7-Zip version. Using a report to check which machines have a vulnerable version of 7-Zip and the Lansweeper deployment module you can detect and update your vulnerable machines.

To make use of this guide make sure the following are in order:
If the requirements are in order, you can mass check and update all your vulnerable assets by doing the following:

1) Follow the instructions found in the Report Center to add the report to your Lansweeper installation.

2) Go to Deployment\Security Options and set up your package share and share user.

3) Follow the instructions found in the Installer Center to add the deployment to your Lansweeper installation and patch your assets.


7-Zip vulnerability
Esben.D
#1Esben.D Member Administration Original PosterPosts: 1,982  
posted: 5/4/2018 2:20:32 PM(UTC)
If you have any questions regarding the report or deployment package, please contact us via email at support@lansweeper.com

Active Discussions

Lansweeper LSAgent Rescan Asset
by  marck1024   Go to last post Go to first unread
Last post: Today at 4:11:53 PM(UTC)
Lansweeper Allowing a role to create asset groups
by  mh6543   Go to last post Go to first unread
Last post: 2/26/2021 10:00:40 PM(UTC)
Lansweeper Export LsAgent Assets
by  steveb  
Go to last post Go to first unread
Last post: 2/26/2021 7:26:32 PM(UTC)
Lansweeper Asset Uptime "Asset on total"
by  Andy.S   Go to last post Go to first unread
Last post: 2/26/2021 3:07:35 PM(UTC)
Lansweeper Scanning for Static Routes?
by  ChrisParr  
Go to last post Go to first unread
Last post: 2/26/2021 12:43:28 PM(UTC)
Lansweeper lansweeperuser sql database permissions
by  David K.   Go to last post Go to first unread
Last post: 2/25/2021 11:54:38 PM(UTC)
Lansweeper Scanning certificates
by  Vincent Pollock  
Go to last post Go to first unread
Last post: 2/25/2021 8:35:11 PM(UTC)