PT-2022-19929 · Lepin · Lepin Ep-Kp001

Matthias Deeg · Published 2022-06-10 · Updated 2022-10-29 · CVE-2022-29948

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Lepin EP-KP001 versions through KP001 V19

Description The issue is due to an insecure design, allowing an authentication bypass attack. This enables an attacker to gain access to stored encrypted data by replacing the microcontroller on a target device with one from an attacker-controlled device whose passcode is known. Normally, the encrypted disk partition is unlocked by entering a correct passcode via the keypad and pressing the Unlock button, with authentication performed by an unknown microcontroller. This vulnerability allows an attacker to unlock the target device and read stored data in cleartext.

Recommendations For Lepin EP-KP001 versions through KP001 V19, consider replacing the microcontroller with a secure one or implementing additional security measures to prevent unauthorized access. As a temporary workaround, restrict physical access to the device to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-29948

Affected Products

Lepin Ep-Kp001

References · 7

• 🔥 http://packetstormsecurity.com/files/167550/Lepin-EP-KP001-KP001_V19-Authentication-Bypass.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2022/Jun/27 · Exploit
• 🔥 https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-024.txt · Exploit
• https://osv.dev/vulnerability/CVE-2022-29948 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29948 · Security Note
• https://t.me/cibsecurity/44213 · Telegram Post
• https://t.me/defcon_news/100035 · Telegram Post