PT-2017-7775 · Akamai · Akamai Netsession

Published 2017-01-23 · Updated 2017-02-07 · CVE-2016-10157

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Akamai NetSession version 1.9.3.1

Description The issue is related to DLL Hijacking, where Akamai NetSession tries to load CSUNSAPI.dll without providing the complete path. This is exacerbated by the absence of the mentioned DLL from the installation, allowing for DLL hijacking and potential code injection within the Akamai NetSession process space.

Recommendations For Akamai NetSession version 1.9.3.1, consider restricting the loading of DLLs to only those with fully specified paths to mitigate the risk of DLL hijacking. As a temporary workaround, ensure that no malicious CSUNSAPI.dll is loaded by the application. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2016-10157

Affected Products

Akamai Netsession

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-10157 · Security Note
• https://osv.dev/vulnerability/CVE-2016-10157 · Vendor Advisory
• http://securityfocus.com/bid/95995 · Note
• https://packetstormsecurity.com/files/140366/Akamai-NetSession-1.9.3.1-DLL-Hijacking.html · Note