PT-2018-17980 · Flight Sim · A320-X

Published 2018-02-20 · Updated 2019-10-03 · CVE-2018-7259

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flight Sim Labs A320-X installer version 2.0.1.231

Description The installer sends a user's Google account credentials to "http://installLog.flightsimlabs.com/LogHandler3.ashx" if a pirated serial number has been entered, allowing remote attackers to obtain sensitive information by sniffing the network for cleartext HTTP traffic.

Recommendations For version 2.0.1.231, update to version 2.0.1.232 to resolve the issue. As a temporary workaround, consider avoiding the use of the installer with potentially pirated serial numbers and restricting network access to minimize the risk of exploitation.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2018-7259

Affected Products

A320-X

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-7259 · Security Note
• https://osv.dev/vulnerability/CVE-2018-7259 · Vendor Advisory
• https://medium.com/%40lukegorman97/flightsimlabs-alleged-malware-analysis-1427c4d23368 · Note
• https://reddit.com/r/flightsim/comments/7yh4zu/fslabs_a320_installer_seems_to_include_a_chrome · Note
• https://forums.flightsimlabs.com/index.php?/topic/16210-malware-in-installer · Note