PT-2018-14084 · Sennheiser · Sennheiser Headsetup

Publicado 2018-11-09 · Atualizado 2019-05-15 · CVE-2018-17612

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Sennheiser HeadSetup version 7.3.4903

Description The issue allows remote attackers to spoof arbitrary web sites or software publishers by utilizing Certification Authority (CA) certificates placed in the Trusted Root CA store of the local system. The private key is published in the SennComCCKey.pem file within the public software distribution. This could enable spoofing even after the HeadSetup product is uninstalled. A vulnerability assessment should check for unwanted CA certificates with a CN of 127.0.0.1 or SennComRootCA on all Windows systems.

Recommendations For Sennheiser HeadSetup version 7.3.4903, remove any unwanted CA certificates with a CN of 127.0.0.1 or SennComRootCA from the Trusted Root CA store to prevent spoofing. As a temporary workaround, consider restricting access to the SennComCCKey.pem file until a patch is available.

Exploit

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2018-17612

Produtos afetados

Sennheiser Headsetup

Referências · 5

• 🔥 https://secorvo.de/publikationen/headsetup-vulnerability-report-secorvo-2018.pdf · Exploit
• http://securityfocus.com/bid/106045 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-17612 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-17612 · Aviso do Fabricante
• https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180029 · Aviso do Fabricante