Wingesfar accepts updates without sufficient verification
Unverified updates can be accepted, so your PC could be hacked.
Summary
The Wingesfar update function does not adequately verify the authenticity and integrity of update packages, so unverified updates can be accepted. Versions before 10.2.1 are affected.
What to do
Check that you run version 10.2.1 or newer, and read the vendor CompuGroup Medical's advisory.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen