Hi everybody,
During the last couple of weeks, our forum colleague
@Opcode has discovered a vulnerability in TEMASOFT Ranstop and developed an exploit that uses administrative privileges to interfere with the protection mechanism. In essence, someone (or something) with administrative privileges could be able to disable the protection using a similar approach.
Although usually admin privilege vulnerabilities are not recognized by vendors, because of the assumption that if an attacker has administrative privileges, the machine is compromised anyway, we acknowledge and commit to addressing this vulnerability, knowing there is ransomware that attempts privilege escalation on the target machines.
We want to take this opportunity to publically express our gratitude to Opcode for his effort and welcome others to address similar concerns to us, in an effort to improve our product.
Best regards,
Calin
