PT-2023-1716 · Moxa · Nport Windows Driver Manager+1

Published 2023-03-14 · Updated 2024-01-27 · CVE-2023-43994

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Line version 13.6.1 NPort 6000 (affected versions not specified) NPort Windows Driver Manager (affected versions not specified)

Description An issue in the Cleaning makotoya mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. A vulnerability in the NPort 6000 terminal server and NPort Windows Driver Manager is related to errors in the certificate authentication procedure, which can allow a remote attacker to perform a man-in-the-middle attack.

Recommendations For Line version 13.6.1, update to a version that fixes the leakage of the channel access token. For NPort 6000, restrict access to the terminal server to minimize the risk of exploitation until a patch is available. For NPort Windows Driver Manager, consider disabling the vulnerable authentication procedure until a fix is provided. At the moment, there is no information about a newer version that contains a fix for the NPort 6000 and NPort Windows Driver Manager vulnerabilities.

Exploit

Fix

Information Disclosure

Improper Certificate Validation

Weakness Enumeration

CWE-200

CWE-295

Related Identifiers

BDU:2023-01295

CVE-2023-43994

Affected Products

Nport 6000

Nport Windows Driver Manager

References · 8

• 🔥 https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43994.md · Exploit
• https://bdu.fstec.ru/vul/2023-01295 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-43994 · Security Note
• https://osv.dev/vulnerability/CVE-2023-43994 · Vendor Advisory
• https://twitter.com/CVEnew/status/1750094197112426654 · Twitter Post
• https://moxa.com/en/support/product-support/security-advisory/nport-6000-series-and-utility-improper-certificate-validation-vulnerabilities · Note
• https://t.me/cvenotify/68488 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1750120909875065009 · Twitter Post