PT-2023-25318 · Cassia · Cassia Access Controller

Published 2023-10-23 · Updated 2024-01-29 · CVE-2023-35794

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cassia Access Controller version 2.1.1.2303271039

Description An issue was discovered in the Cassia Access Controller where the Web SSH terminal endpoint, also known as the spawned console, can be accessed without proper authentication. The Access Controller lacks session cookie validation and instead relies solely on Basic Authentication to the SSH console.

Recommendations For Cassia Access Controller version 2.1.1.2303271039, consider disabling access to the Web SSH terminal endpoint until a patch is available that implements proper session cookie validation. Restrict access to the SSH console to minimize the risk of exploitation by only allowing authenticated and authorized users to access the console. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-35794

Affected Products

Cassia Access Controller

References · 8

• 🔥 https://github.com/Dodge-MPTC/CVE-2023-35794-WebSSH-Hijacking · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-35794 · Security Note
• https://osv.dev/vulnerability/CVE-2023-35794 · Vendor Advisory
• https://twitter.com/CVEnew/status/1718004224464769191 · Twitter Post
• https://t.me/cvenotify/69150 · Telegram Post
• https://blog.kscsc.online/cves/202335794/md.html · Note
• https://cassianetworks.com/products/iot-access-controller · Note
• https://twitter.com/VulmonFeeds/status/1716398039022145738 · Twitter Post