PT-2022-25425 · Unknown · Tacitine Firewall+2

Sreedev Kumar · Published 2022-09-23 · Updated 2022-09-27 · CVE-2022-40628

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tacitine Firewall versions 19.1.1 through 22.20.1 EN6200-PRIME QUAD-35 versions 19.1.1 through 22.20.1 EN6200-PRIME QUAD-100 versions 19.1.1 through 22.20.1

Description This issue exists due to improper control of code generation in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this by sending a specially crafted http request on the targeted device. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary commands on the targeted device.

Recommendations For Tacitine Firewall versions 19.1.1 through 22.20.1, consider disabling the web-based management interface until a patch is available. For EN6200-PRIME QUAD-35 versions 19.1.1 through 22.20.1, restrict access to the web-based management interface to minimize the risk of exploitation. For EN6200-PRIME QUAD-100 versions 19.1.1 through 22.20.1, avoid using the web-based management interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2022-40628

Affected Products

En6200-Prime Quad-100

En6200-Prime Quad-35

Tacitine Firewall

References · 6

• https://tacitine.com/newdownload/CVE-2022-40628.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-40628 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40628 · Security Note
• https://t.me/cibsecurity/50358 · Telegram Post
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2022-0363 · Note
• https://t.me/cvenotify/36839 · Telegram Post