Lucene search

MitreCVE-2017-11400

HistoryNov 20, 2017 - 3:29 p.m.

CVE-2017-11400

2017-11-2015:29:00

CWE-347

mitre

web.nvd.nist.gov

cve-2017-11400

belden hirschmann

tofino xenon

security appliance

firmware signature

local attacker

upgrade

unsigned data

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

32.0%

JSON

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker to upgrade the equipment (kernel, file system) with unsigned, attacker-controlled, data. This occurs because the appliance_config file is signed but the .tar.sec file is unsigned.

Affected configurations

Nvd

Node

beldentofino_xenon_security_appliance_firmwareRange≤3.1.0

AND

beldentofino_xenon_security_applianceMatch-

VendorProductVersionCPE
beldentofino_xenon_security_appliance_firmware*cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware:*:*:*:*:*:*:*:*
beldentofino_xenon_security_appliance-cpe:2.3:h:belden:tofino_xenon_security_appliance:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
belden	tofino_xenon_security_appliance_firmware	*	cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware::::::::
belden	tofino_xenon_security_appliance	-	cpe:2.3:h:belden:tofino_xenon_security_appliance:-:::::::*

References

github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt

www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

32.0%

JSON

Related for CVE-2017-11400