Security Vulnerability within LMInfo.sys

[lmiuser12]

thanks for the update

[GlennD]

Hi,

We have begun deploying the update to accounts and systems will begin auto updating over the coming days.

[SOSCOMP]

Hi we are having same issue and with our endpoint security and LMI. We have ran the LMI update today (version.15410 installed) and rebooted. Our ENDpoint product is upto date as well.

"A potentially unsafe application (Win64/LogMeIn.A) found in a file (the filename is random)" tried to access."

Please help-pop-ups occurring often!

[2ARM5]

Hi Glenn,

All of our systems are set to update automatically, but the update is prompting users for admin. credentials. 

Our users don't have admin. rights.   Is there a way to run this update programmatically?  

[SOSCOMP]

Hi did your get a resolution to this? We have same issue -using ESET Endpoint

[SOSCOMP]

We have same issue and mos recent update for LogMein did not fix it. We use ESET Endpoint and their support said it was LMI issue-thanks

[GlennD]

Hi, I am checking with the team on what the next course of action is. The update itself was quite minor and should have just resulted in the previous LMInfo.sys warning going away.

[2ARM5]

Hi Glen,

I've only installed the update on one system so far, due to the issue I raised in my last post, but that system did pass an AV scan w/o a detection.  

Best,

[GlennD]

@SOSCOMP What version of Windows is being used? We tested all supported Windows versions and only identified an issue with Windows 7 x64 and Server 2008 R2 x64 as they have issues validating the signature of the updated driver. According to Microsoft this Windows update should help with that: https://catalog.update.microsoft.com/search.aspx?q=kb4474419 

[GlennD]

@2ARM5 If the computers are left to self update it should happen in the background and your users will not be asked for admin credentials to complete it. If a user manually checks for an upgrade the admin credentials are required as a security feature.