PT-2023-17238 · Gajshield · Gajshield Data Security Firewall

Prashant Pandey · Publicado 2023-04-27 · Atualizado 2023-05-08 · CVE-2023-1778

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GajShield Data Security Firewall versions prior to v4.28 (except v4.21)

Description This issue exists due to insecure default credentials, allowing a remote attacker to login as a superuser by using the default username and password via the web-based management interface and/or exposed SSH port. This enables remote attackers to execute arbitrary commands with administrative privileges on the targeted systems.

Recommendations For versions prior to v4.28 (except v4.21), the vulnerability has been addressed by forcing the user to change their default password to a new non-default password.

Correção

Insufficiently Protected Credentials

Improper Authentication

Enumeração de Fraquezas

CWE-522

CWE-287

Identificadores relacionados

CVE-2023-1778

Produtos afetados

Gajshield Data Security Firewall

Referências · 6

• https://t.me/cibsecurity/62967 · Publicação no Telegram
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0119 · Nota
• https://t.me/cvenotify/49986 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-1778 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-1778 · Nota de Segurança
• https://t.me/cvenotify/49174 · Publicação no Telegram