漏洞描述
AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.
影响产品
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
download.anydesk.comhttps://download.anydesk.com/changelog.txt↗packetstormsecurity.comhttp://packetstormsecurity.com/files/158291/AnyDesk-GUI-Format-String-Write.html↗devel0pment.dehttps://devel0pment.de/?p=1881↗packetstormsecurity.comhttp://packetstormsecurity.com/files/161628/AnyDesk-5.5.2-Remote-Code-Execution.html↗