PT-2017-13792 · Infocus+1 · Infocus Mondopad+1

Binary1985 + 3 · Publicado 2017-10-09 · Atualizado 2017-11-02 · CVE-2017-14971

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Infocus Mondopad version 2.2.08

Description The issue allows an attacker to disclose hashed credentials by providing a crafted Microsoft Office document, such as an Excel spreadsheet, containing a link with a UNC pathname associated with an attacker-controlled server. This enables the attacker-controlled server to receive the victim's NetNTLMv2 hash.

Recommendations For Infocus Mondopad version 2.2.08, consider disabling the handling of UNC pathnames in Microsoft Office documents as a temporary workaround until a patch is available. Restrict access to sensitive areas of the system to minimize the risk of exploitation. Avoid opening suspicious Microsoft Office documents from untrusted sources. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-14971

Produtos afetados

Infocus Mondopad

Office

Referências · 3

• 🔥 https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/InFocus%20Mondopad%20%3C%202.2.08%20-%20CVE-2017-14971 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-14971 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-14971 · Aviso do Fabricante