CVE:CVE-2022-28944
CNNVD:CNNVD-202205-3980
EMCO Software EMCO MSI Package Builder for Windows等都是冰岛EMCO Software公司的产品。EMCO Software EMCO MSI Package Builder for Windows是一种用于创建 Windows Installer 程序包的软件工具。EMCO Software EMCO Remote Shutdown for Windows是一种用于网络的 PC 电源管理工具。EMCO Software EMCO Remote Installer for Windows是一种适用于 Windows 的软件分发工具。
EMCO Software 多款产品存在安全漏洞，远程攻击者利用该漏洞可在受影响的 EMCO 软件安装上执行任意代码。以下产品和版本受到影响：EMCO MSI Package Builder for Windows 9.1.4 (uses HTTP)、EMCO Remote Installer for Windows 6.0.13、EMCO Ping Monitor for Windows 8.0.18、EMCO Remote Shutdown for Windows 7.2.2、EMCO WakeOnLan Free 2.0.8、EMCO WakeOnLan Professional 2.0.8、EMCO Network Inventory for Windows 5.8.22 (different configuration)、EMCO Network Software Scanner for Windows 2.0.8、EMCO UnLock IT for Windows 6.1.1 (uses HTTP)。
solution:Upgrade emcosoftware msi_package_builder to a higher version than 9.1.4,and avoid the version 9.1.4; Upgrade emcosoftware network_inventory to a higher version than 5.8.22,and avoid the version 5.8.22; Upgrade emcosoftware network_software_scanner to a higher version than 2.0.8,and avoid the version 2.0.8; Upgrade emcosoftware ping_monitor to a higher version than 8.0.18,and avoid the version 8.0.18; Upgrade emcosoftware remote_installer to a higher version than 6.0.13,and avoid the version 6.0.13; Upgrade emcosoftware remote_shutdown to a higher version than 7.2.2,and avoid the version 7.2.2; Upgrade emcosoftware unlock_it to a higher version than 6.1.1,and avoid the version 6.1.1; Upgrade emcosoftware wakeonlan to a higher version than 2.0.8,and avoid the version 2.0.8