CVE-2017-11400
medium
CVSS v3
6.8
CVSS v2
7.2
VIR risk
6.8
Description
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker to upgrade the equipment (kernel, file system) with unsigned, attacker-controlled, data. This occurs because the appliance_config file is signed but the .tar.sec file is unsigned.
Predictions
Exploit likelihood
67%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf
References
- https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt
- https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf
- https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt
- https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf
CWEs
CWE-347
Verify integrity in audit chain (admin only). AS-IS.