CVE-2017-10818

Critical

Published: 04/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized configuration changes and potential takeover of services, posing a threat to organizational security.

Recommendation

It is recommended to update to the latest version of MaLion to eliminate the hardcoded cryptographic key and minimize the risk of attacks.

Original NVD description (English source)

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service.