The FDA announced on 2019-08-15 that Normand-Info S.A.S.U. is recalling Remisol Advance software running on Windows XP, Windows 7, Windows Server 2003 and Windows Server 2008 operating systems due to a critical remote code execution vulnerability. This defect allows attackers to execute arbitrary code without authentication. The FDA said the recall was voluntary.
How to tell if you have it
- Brand: Normand-Info
- Product: Remisol Advance
- Operating Systems: Windows XP, Windows Server 2003, Windows 7, Windows Server 2008
- Serial Numbers: All serial numbers
- Units affected: 6479
The hazard
According to the FDA, a patch was released for a critical remote code execution vulnerability in remote desktop services that can be exploited remotely without authentication. An attacker who successfully exploits this vulnerability could execute arbitrary code on the target system, install programs, view, change, or delete data, or create new accounts with full user rights. If the vulnerability could be exploited locally, it would lock down the computer.
Context
GovInfoNow's records show Normand-Info S.A.S.U. has issued two other recalls since 2020-04-30. On 2021-03-22, the company recalled Remisol Advance Data Manager Software because incorrect rules may cause erroneous lab results. Another recall on 2020-04-30 involved Normand Info Remisol Advance Software 1.12, where incorrect blood test results risked deletion of repeated run data for WBC, UWBC and PLT.