HancomWith, LaonSecure, and Innyline Products Security Update Recommendations

HancomWith, LaonSecure, and Innyline Products Security Update Recommendations

Overview

We have released security updates to fix vulnerabilities in HancomWith, Raonsecure, and Inniline products. All users and representatives of organizations operating these S/W should update to the latest version according to the solution.
 

 

Affected Products

AnySign4PC 1.1.4.3 and earlier versions
TouchEn nxKey 1.0.0.89 and earlier versions
CrossEX 1.0.2.16 and earlier versions

 

 

Resolved Vulnerabilities

Internal information gathering vulnerability (AnySign4PC)
Buffer overflow and remote code execution vulnerability (TouchEn nxKey)
Arbitrary license issuance vulnerability (CrossEX)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
 

AnySign4PC version 1.1.4.4
TouchEn nxKey 1.0.0.90 version
CrossEX 1.0.2.17 version

 

Workaround

Service operators: Replace with the latest version through HancomWith, RaonSecure, or Inniline
General users: If vulnerable versions of AnySign4PC, TouchEn nxKey, and CrossEX are installed, uninstall and update to the latest version
please refer to the link below to install the latest version

 

[AnySgin4PC Latest Version Update Link]
– 32bit/64bit : https://download.softforum.co.kr/Published/AnySign/v1.1.4.4/AnySign_Installer.exe

[Link to update the latest version of TouchEn nxKey, CrossEX] 32bit/64bit 
– 32bit : https://download.raonsecure.com/TouchEnnxKey/current/TouchEn_nxKey_Installer_FK_S_32bit.exe
– 64bit : https://download.raonsecure.com/TouchEnnxKey/current/TouchEn_nxKey_Installer_FK_S_64bit.exe
TouchEn nxKey and CrossEX are distributed as an integrated package, so you only need to install one and the update will be applied to both products. However, you need to install according to your browser bit (32/64 bit).

 

 

References

[1] HancomWith, LaonSecure, and Inline products recommended for security updates
https://www.krcert.or.kr/kr/bbs/view.do?searchCnd=&bbsId=B0000133&searchWrd=&menuNo=205020&pageIndex=1&categoryCode=&nttId=71693