Administrator file transfer through lockdown bypass

Improper access control in TXOne Networks SafePortAgent and StellarProtect allows local users with administrator privileges to bypass file lockdown. The Removable Media Validation function fails to enforce the lockdown decision for attacker-prepared files; TXOne has not disclosed the exact validation operation. A removable device must be preloaded with an unauthorized file, and successful exploitation writes that file to the endpoint.