AhnLab ASEC blog (asec.ahnlab.com)
Warning for Asset Management Program (TCO!Stream) Vulnerability and Update Recommendation · 2023-03-17
excerpt: Vulnerable Software and Overview TCO!Stream is an asset management solution developed by the Korean company, MLsoft. Consisting of a server and a client, administrators can use the console program to perform asset management work by accessing the server. TCO!Stream offers various features for asset management, but there is a process that runs constantly on the […] | attribution sentence: Patch Target and Versions TCO!Stream versions 8.0.22.1115 or earlier Vulnerability Exploitation Log (Lazarus) During the analysis process of a client company’s infiltration case, it was discovered that the TCO!Stream solution was exploited by a threat actor to execute their code remotely through multiple PCs and install backdoors. | target sentence: Patch Target and Versions TCO!Stream versions 8.0.22.1115 or earlier Vulnerability Exploitation Log (Lazarus) During the analysis process of a client company’s infiltration case, it was discovered that the TCO!Stream solution was exploited by a threat actor to execute their code remotely through mul