CVE-2023-43870

When installing the Net2 software a root certificate is installed into the trusted store. A potential hacker could access the installer batch file or reverse engineer the source code to gain access to the root certificate password. Using the root certificate and password they could then create their own certificates to emulate another site. Then by establishing a proxy service to emulate the site they could monitor traffic passed between the end user and the site allowing access to the data content.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.paxton-access.com/systems/net2/	Product

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:paxton-access:net2::::::::
	cpe:2.3:a:paxton-access:net2:6.07:-::::::

History

28 Dec 2023, 19:01

Type	Values Removed	Values Added
References	~~() https://www.paxton-access.com/systems/net2/ -~~	() https://www.paxton-access.com/systems/net2/ - Product
CVSS	v2 : ~~unknown~~ v3 : ~~8.1~~	v2 : unknown v3 : 9.8
CPE		cpe:2.3:a:paxton-access:net2:6.07:-:::::: cpe:2.3:a:paxton-access:net2::::::::
Summary		(es) Al instalar el software Net2, se instala un certificado root en el almacén de confianza. Un hacker potencial podría acceder al archivo por lotes del instalador o aplicar ingeniería inversa al código fuente para obtener acceso a la contraseña del certificado root. Usando el certificado root y la contraseña, podrían crear sus propios certificados para emular otro sitio. Luego, al establecer un servicio proxy para emular el sitio, podrían monitorizar el tráfico que pasa entre el usuario final y el sitio, permitiendo el acceso al contenido de los datos.
First Time		Paxton-access Paxton-access net2

19 Dec 2023, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-19 15:15

Updated : 2023-12-28 19:01

NVD link : CVE-2023-43870

Mitre link : CVE-2023-43870

CVE.ORG link : CVE-2023-43870

JSON object : View

Products Affected

paxton-access

net2

CWE

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2023-43870", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "cert@ncsc.nl", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "published": "2023-12-19T15:15:08.357", "references": [{"url": "https://www.paxton-access.com/systems/net2/", "tags": ["Product"], "source": "cert@ncsc.nl"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-798"}]}, {"type": "Secondary", "source": "cert@ncsc.nl", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "When installing the Net2 software a root certificate is installed into the trusted store. A potential hacker could access the installer batch file or reverse engineer the source code to gain access to the root certificate password. Using the root certificate and password they could then create their own certificates to emulate another site. Then by establishing a proxy service to emulate the site they could monitor traffic passed between the end user and the site allowing access to the data content."}, {"lang": "es", "value": "Al instalar el software Net2, se instala un certificado root en el almac\u00e9n de confianza. Un hacker potencial podr\u00eda acceder al archivo por lotes del instalador o aplicar ingenier\u00eda inversa al c\u00f3digo fuente para obtener acceso a la contrase\u00f1a del certificado root. Usando el certificado root y la contrase\u00f1a, podr\u00edan crear sus propios certificados para emular otro sitio. Luego, al establecer un servicio proxy para emular el sitio, podr\u00edan monitorizar el tr\u00e1fico que pasa entre el usuario final y el sitio, permitiendo el acceso al contenido de los datos."}], "lastModified": "2023-12-28T19:01:18.400", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:paxton-access:net2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2C3F8BF-B86F-4685-80E6-D8EA28AA427F", "versionEndExcluding": "6.07", "versionStartIncluding": "6.02"}, {"criteria": "cpe:2.3:a:paxton-access:net2:6.07:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E4CB52A-DABA-45E3-A770-4AD00B069CD2"}], "operator": "OR"}]}], "sourceIdentifier": "cert@ncsc.nl"}