anydesk remote code execution vulnerability

The platform itself, SmartClients, and supporting services.

None of the uniFLOW Online/uniFLOW Online Express components are affected:

Devices connected with uniFLOW Release Stations.

Xerox/HP/Samsung/Konica Minolta/Brother/Sharp/OKI/EPSON/Lexmark devices.

uniFLOW Server, Remote Print Servers, SmartClients, Internet Gateway, Web Submission, and supporting services.

None of the uniFLOW components are affected:

We have taken immediate steps to patch or place mitigation controls in place.

Some internal services have been identified as utilizing Spring4Shell.

All public-facing sites and services have been reviewed and scanned by vulnerability assessment tools and human inspection.

As it is early in the release of this vulnerability, the information below is subject to change if new exploits are identified.īelow you can find a breakdown of the activity for NT-ware as a company and our individual products: NT-ware - company The result of these activities have concluded and are listed below. We actioned our security and development team to investigate, mitigate and communicate our activities. Named Spring4Shell and tracked under CVE-2022-22965, this vulnerability is in the Java ‘Spring’ library. NT-ware is aware of a new remote code execution vulnerability affecting the Java Spring framework. Access to the NT-ware Knowledgebase is granted to all local Canon offices and authorized resellers to receive more detailed information and patches. For further information regarding these advisories please contact your local Canon office, authorized reseller or NT-ware support representative. This section provides an overview of all critical uniFLOW security advisories.

Anydesk remote code execution vulnerability