Critical Security Bugs Fixed in Virtual Learning Software

[silversurfer]

Netop, the company behind a popular software tool designed to let teachers remotely access student computers, has fixed four security bugs in its platform.
 
Researchers said that the critical vulnerabilities in the company’s Netop Vision Pro system could allow attackers to hijack school networks, deliver malware, determine IP addresses of students, eavesdrop and more.
 
The flaws were disclosed to Netop on Dec. 11. By late February, the company had issued an update addressing several of the concerns (in Netop Vision Pro version 9.7.2), said researchers.
 
“In Netop Vision Pro 9.7.2, released in late February, Netop has fixed the local privilege escalations, encrypted formerly plaintext Windows credentials, and mitigated the arbitrary read/writes on the remote filesystem within the MChat client,” according to a Sunday report by the McAfee Labs Advanced Threat Research team, which discovered the flaws.

Read more: Critical Security Bugs Fixed in Virtual Learning Software | Threatpost