PT-2022-17158 · Unknown · Telnetd Startup

Olivia Lucca Fraser · Published 2022-03-07 · Updated 2023-08-08 · CVE-2022-25219

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions telnetd startup daemon (affected versions not specified)

Description A null byte interaction error has been found in the telnetd startup daemon's code for constructing ephemeral passwords. This error allows an unauthenticated attacker on the local network to predict these passwords with 1-in-94 odds by sending crafted UDP packets. The exploitation of this issue relies on the use of an unpadded RSA cipher and manipulation of data processed by the RSA public decrypt() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-25219

Affected Products

Telnetd Startup

References · 4

• 🔥 https://tenable.com/security/research/tra-2022-01 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-25219 · Security Note
• https://osv.dev/vulnerability/CVE-2022-25219 · Vendor Advisory
• https://t.me/cibsecurity/38667 · Telegram Post