CVE-2023-43870
Assigner: NCSC-NL
Published: 2023-12-19T15:09:13.276Z
State: PUBLISHED
problemTypes: descriptions: cweId: CWE-798
description: CWE-798 Use of Hard-coded Credentials
type: CWE
impacts: capecId: CAPEC-21
descriptions: value: CAPEC-21 Exploitation of Trusted Credentials
affected: vendor: Paxton
product: Net2
versions: status: affected
version: 6.02
lessThan: 6.07 SR1
versionType: custom
defaultStatus: unaffected
descriptions: value: When installing the Net2 software a root certificate is installed into the trusted store. A potential hacker could access the installer batch file or reverse engineer the source code to gain access to the root certificate password. Using the root certificate and password they could then create their own certificates to emulate another site. Then by establishing a proxy service to emulate the site they could monitor traffic passed between the end user and the site allowing access to the data content.
supportingMedia: type: text/html
base64: no
value: When installing the Net2 software a root certificate is installed into the trusted store. A potential hacker could access the installer batch file or reverse engineer the source code to gain access to the root certificate password. Using the root certificate and password they could then create their own certificates to emulate another site. Then by establishing a proxy service to emulate the site they could monitor traffic passed between the end user and the site allowing access to the data content.
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseSeverity: HIGH
baseScore: 8.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
credits: value: Jeroen Hermans, CloudAware, j.hermans@cloudaware[.]eu
type: finder