PT-2018-13269 · Ovation · Ovation Findme

Publicado 2018-08-26 · Atualizado 2018-11-07 · CVE-2018-15885

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ovation FindMe version 1.4-1083-1

Description The issue concerns the transmission of network traffic from covert video recorders. It does not properly prevent binary analysis, making it easier for adversaries to detect the covert operation. The product uses a compression technique to obfuscate certain libraries in the software. It relies on a TLS callback and an additional executable file to enable these libraries and their access to certain websites. The unpacked software can be exploited by several different types of documented techniques.

Recommendations For Ovation FindMe version 1.4-1083-1, consider restricting access to the software until a proper fix is available, and avoid using the TLS callback and additional executable file to minimize the risk of exploitation. As a temporary workaround, consider disabling the compression technique used for obfuscation until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-15885

Produtos afetados

Ovation Findme

Referências · 3

• 🔥 https://github.com/GitHubAssessments/CVE_Assessment_02_2018/blob/master/FindMe_Report.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2018-15885 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15885 · Nota de Segurança