PT-2017-11526 · Malion · Malion

Muneaki Nishimura · Publicado 2017-08-04 · Atualizado 2021-05-19 · CVE-2017-10818

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MaLion for Windows and Mac versions 3.2.1 through 5.2.1

Description The issue concerns a hardcoded cryptographic key in MaLion, which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service.

Recommendations For MaLion for Windows and Mac versions 3.2.1 through 5.2.1, consider updating to a version that does not use a hardcoded cryptographic key to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2017-10818

Produtos afetados

Malion

Referências · 5

• http://intercom.co.jp/information/2017/0801.html · Aviso do Fabricante
• https://t.me/cvenotify/14636 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2017-10818 · Aviso do Fabricante
• https://jvn.jp/en/vu/JVNVU91587298/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-10818 · Nota de Segurança