Menu INFORMATION SYSTEMS AND TECHNOLOGIES Home Vulnerability Found in Secret Net 7 Secret Net 7 vulnerability discovered In the Secret Net 7 software (similar to versions of Secret Net 6, Secret Net 6 (K version), Secret Net 5 and Secret Net 5.1), a vulnerability was discovered that allows a user to elevate his privileges to administrative privileges by running malicious software (the vulnerability is registered in the database FSTEC security threats under the number 2016-00436 ). In this regard, Security Code has released an update to the Secret Net 7 information security system (service pack 6). It fixes bugs that could allow attackers to exploit the vulnerability. The distribution kit and the update procedure are available at http://www.securitycode.ru/products/secret_net/sns7 . The update is mandatory for installation immediately after release without waiting for the end of the inspection control procedure. In the event of an update in the certified system, the customer needs to send a notification letter to the certification body (the organization that issued the certificate). In this case, re-certification of the system is not required. The procedure for updating the Secret Net 7 information security system is detailed in the updated section 6 ( Form RU.88338853.501410.015 30 ). If it is impossible to perform updates promptly (including before the release of updates for Secret Net 6 and Secret Net 6 (option K)), technical measures must be taken to limit the list of applications allowed to run. Launch Restrictions implemented using closed software environment mechanism, detailed instructions on how to configure it, see for reference ftp://ftp.securitycode.ru/Demo/sn/sn7/604_00/Instr_uel.rtf . ASBK specialists are ready to provide the necessary assistance in carrying out measures to eliminate the discovered vulnerability! Back to the list About company Company Profile Licenses and certificates Partners news Contacts Progress Customers Projects Reviews and thanks activity Events Training Conferences Solutions Financial management PFA administration HR management Procurement management Activity management Analytics and statistics Services Implementation and maintenance of 1C software products Development and modernization of software products 1C Center for certified training 1C Implementation and support of information systems PARUS 8 Implementation and support of BARS information systems Development and integration of custom systems Information Security Maintenance and system maintenance Electronic inventory Accounting and reporting methodology consulting Career Vacancies Corporate life Our contacts 107113, Moscow, st. Lobachika, 11 +7 (495) 988-84-02 +7 (495) 988-84-03 office@asbc.ru Social networks Copyright © 2016, ACBK OLD SITE