PT-2022-10161 · Claroty · Claroty Secure Remote Access (Sra) Site

Published 2022-05-23 · Updated 2022-06-07 · CVE-2021-32958

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2

Description Successful exploitation of this issue allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface (UI). With access to the web UI, an attacker can access assets managed by the SRA installation and could compromise the installation.

Recommendations For versions 3.0 through 3.2, update to a version that includes a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the local command line interface to minimize the risk of an attacker gaining the secret key. Additionally, monitor the SRA installation for any suspicious activity and limit access to the web UI to authorized personnel only.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2021-32958

Affected Products

Claroty Secure Remote Access (Sra) Site

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-32958 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32958 · Vendor Advisory
• https://t.me/cibsecurity/43200 · Telegram Post
• https://t.me/cvenotify/30600 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-21-180-06 · Note