PT-2017-13792 · Infocus+1 · Infocus Mondopad+1

Binary1985 + 3 · Published 2017-10-09 · Updated 2017-11-02 · CVE-2017-14971

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Infocus Mondopad version 2.2.08

Description The issue allows an attacker to disclose hashed credentials by providing a crafted Microsoft Office document, such as an Excel spreadsheet, containing a link with a UNC pathname associated with an attacker-controlled server. This enables the attacker-controlled server to receive the victim's NetNTLMv2 hash.

Recommendations For Infocus Mondopad version 2.2.08, consider disabling the handling of UNC pathnames in Microsoft Office documents as a temporary workaround until a patch is available. Restrict access to sensitive areas of the system to minimize the risk of exploitation. Avoid opening suspicious Microsoft Office documents from untrusted sources. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-14971

Affected Products

Infocus Mondopad

Office

References · 3

• 🔥 https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/InFocus%20Mondopad%20%3C%202.2.08%20-%20CVE-2017-14971 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-14971 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14971 · Vendor Advisory