PT-2022-25426 · Unknown · Tacitine Firewall+2

Sreedev Kumar · Published 2022-09-23 · Updated 2022-09-26 · CVE-2022-40629

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tacitine Firewall versions 19.1.1 through 22.20.1 EN6200-PRIME QUAD-35 versions 19.1.1 through 22.20.1 EN6200-PRIME QUAD-100 versions 19.1.1 through 22.20.1

Description This issue is due to an insecure design in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this by sending a specially crafted http request on the targeted device. Successful exploitation could allow an unauthenticated remote attacker to view sensitive information on the targeted device.

Recommendations For versions 19.1.1 through 22.20.1 of Tacitine Firewall, EN6200-PRIME QUAD-35, and EN6200-PRIME QUAD-100, consider restricting access to the web-based management interface until a patch is available. As a temporary workaround, avoid using the web-based management interface for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-40629

Affected Products

En6200-Prime Quad-100

En6200-Prime Quad-35

Tacitine Firewall

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-40629 · Security Note
• https://osv.dev/vulnerability/CVE-2022-40629 · Vendor Advisory
• https://tacitine.com/newdownload/CVE-2022-40629.pdf · Vendor Advisory
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2022-0363 · Note
• https://t.me/cibsecurity/50383 · Telegram Post