CVE-2018-17612

Description

Sennheiser HeadSetup 7.3.4903 places Certification Authority (CA) certificates into the Trusted Root CA store of the local system, and publishes the private key in the SennComCCKey.pem file within the public software distribution, which allows remote attackers to spoof arbitrary web sites or software publishers for several years, even if the HeadSetup product is uninstalled. NOTE: a vulnerability-assessment approach must check all Windows systems for CA certificates with a CN of 127.0.0.1 or SennComRootCA, and determine whether those certificates are unwanted.

Related CPE's

asennheiserheadsetup7.3.4903*******

omicrosoftwindows_server_2008r2sp1****x64*

omicrosoftwindows_server_2012r2*******

omicrosoftwindows_server_2008r2sp1****itanium*

omicrosoftwindows_101607*******

omicrosoftwindows_8.1-*******

omicrosoftwindows_server_2016-*******

omicrosoftwindows_server_2008-sp2******

omicrosoftwindows_7-sp1******

omicrosoftwindows_rt_8.1-*******

References

https://www.secorvo.de/publikationen/headsetup-vulnerability-report-secorvo-2018.pdf

ExploitMitigationTechnical DescriptionThird Party Advisory

https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180029

PatchVendor Advisory

106045

Third Party AdvisoryVDB Entry

CvssV3 impact

BaseSeverity

HIGH

ConfidentialityImpact

NONE

AttackComplexity

LOW

Scope

UNCHANGED

AttackVector

NETWORK

AvailabilityImpact

NONE

IntegrityImpact

HIGH

PrivilegesRequired

NONE

BaseScore

7.5

VectorString

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Version

3.0

UserInteraction

NONE

CvssV2 impact

Version

2.0

VectorString

AV:N/AC:L/Au:N/C:N/I:P/A:N

AccessVector

NETWORK

AccessComplexity

LOW

Authentication

NONE

ConfidentialityImpact

NONE

IntegrityImpact

PARTIAL

AvailabilityImpact

NONE

BaseScore

5

Created by Yello
About Severity.io