CVE-2019-6026

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-12-26 · updated 2026-06-17

Description

Privilege escalation vulnerability in Multiple MOTEX products (LanScope Cat client program (MR) and LanScope Cat client program (MR)LanScope Cat detection agent (DA) prior to Ver.9.2.1.0, LanScope Cat server monitoring agent (SA, SAE) prior to Ver.9.2.2.0, LanScope An prior to Ver 2.7.7.0 (LanScope An 2 series), and LanScope An prior to Ver 3.0.8.1 (LanScope An 3 series)) allow authenticated attackers to obtain unauthorized privileges and execute arbitrary code.

Affected products

Motex Lanscope An: from 2.0.0.0 before 2.7.7.0; from 3.0.0.0 before 3.0.8.1 — fixed in 2.7.7.0, 3.0.8.1
Motex Lanscope Cat Client Program: before 8.4.3.2; from 9.0.0.0 through 9.0.1.9; from 9.1.0.0 through 9.1.0.8; from 9.2.0.0 through 9.2.0.3 — fixed in 8.4.3.2
Motex Lanscope Cat Detection Agent: before 8.4.3.2; from 9.0.0.0 through 9.0.1.9; from 9.1.0.0 through 9.1.0.8; from 9.2.0.0 through 9.2.0.3 — fixed in 8.4.3.2
Motex Lanscope Cat Server Monitoring Agent: before 9.2.2.0 — fixed in 9.2.2.0

How to fix

Upgrade to a fixed version: Motex Lanscope An 2.7.7.0, 3.0.8.1; Motex Lanscope Cat Client Program 8.4.3.2; Motex Lanscope Cat Detection Agent 8.4.3.2; Motex Lanscope Cat Server Monitoring Agent 9.2.2.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-6026 or the next vulnerability affects your stack