PT-2023-17238 · Gajshield · Gajshield Data Security Firewall

Prashant Pandey · Published 2023-04-27 · Updated 2023-05-08 · CVE-2023-1778

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GajShield Data Security Firewall versions prior to v4.28 (except v4.21)

Description This issue exists due to insecure default credentials, allowing a remote attacker to login as a superuser by using the default username and password via the web-based management interface and/or exposed SSH port. This enables remote attackers to execute arbitrary commands with administrative privileges on the targeted systems.

Recommendations For versions prior to v4.28 (except v4.21), the vulnerability has been addressed by forcing the user to change their default password to a new non-default password.

Fix

Insufficiently Protected Credentials

Improper Authentication

Weakness Enumeration

CWE-522

CWE-287

Related Identifiers

CVE-2023-1778

Affected Products

Gajshield Data Security Firewall

References · 6

• https://osv.dev/vulnerability/CVE-2023-1778 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1778 · Security Note
• https://t.me/cibsecurity/62967 · Telegram Post
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0119 · Note
• https://t.me/cvenotify/49986 · Telegram Post
• https://t.me/cvenotify/49174 · Telegram Post