WEKA INTEREST Security Scanner up to 1.8 Stresstest Configuration denial of service
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
3.7 | $0-$5k | 0.11 |
A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8 (Security Testing Software). Affected by this vulnerability is some unknown functionality of the component Stresstest Configuration Handler. The manipulation with an unknown input leads to a denial of service vulnerability. The CWE definition for the vulnerability is CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. As an impact it is known to affect availability.
The bug was discovered 07/30/2007. The weakness was released 06/05/2017 by Marc Ruef with scip AG as VDB-101969 as confirmed entry (VulDB). It is possible to read the advisory at vuldb.com. The vendor was not involved in the public release. The entry contains:
The Attack Tool Kit (ATK) is an exploiting framwork published under GPL3. Back in 2006 there was a legal dispute between the developer Marc Ruef and the German company WEKA. Ruef claimed that WEKA violated the open-source license while they were using parts of the project within their commercial vulnerability scanner. During the technical analysis of INTEREST SEcurity Scanner several security issues, which affect the handling of the vulnerability scanner, got determined.This vulnerability is known as CVE-2017-20013. The exploitation appears to be easy. Attacking locally is a requirement. A single authentication is required for exploitation. It demands that the victim is doing some kind of user interaction. Technical details are unknown but a public exploit is available. The advisory points out:
The stresstest module does take the config settings into consideration.
A public exploit has been developed by Marc Ruef and been published immediately after the advisory. It is possible to download the exploit at vuldb.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 3598 days. During that time the estimated underground price was around $0-$5k.
The problem might be mitigated by replacing the product with ATK - Attack Tool Kit as an alternative.
Additional details are provided at computec.ch. Entries connected to this vulnerability are available at 101969, 101970, 101972 and 101973.
Product
Type
Vendor
Name
Version
Support
- end of life
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 3.7VulDB Meta Temp Score: 3.7
VulDB Base Score: 2.8
VulDB Temp Score: 2.7
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 5.5
NVD Vector: 🔍
CNA Base Score: 2.8
CNA Vector (VulDB): 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Denial of serviceCWE: CWE-404
CAPEC: 🔍
ATT&CK: 🔍
Local: Yes
Remote: No
Availability: 🔍
Access: Public
Status: Proof-of-Concept
Author: Marc Ruef
Download: 🔍
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: AlternativeStatus: 🔍
0-Day Time: 🔍
Exploit Delay Time: 🔍
Alternative: ATK - Attack Tool Kit
Timeline
07/30/2007 🔍06/05/2017 🔍
06/05/2017 🔍
06/05/2017 🔍
01/28/2022 🔍
12/07/2022 🔍
Sources
Advisory: VDB-101969Researcher: Marc Ruef
Organization: scip AG
Status: Confirmed
CVE: CVE-2017-20013 (🔍)
scip Labs: https://www.scip.ch/en/?labs.20161013
Misc.: 🔍
See also: 🔍
Entry
Created: 06/05/2017 22:20Updated: 12/07/2022 17:58
Changes: 06/05/2017 22:20 (59), 05/17/2020 10:53 (2), 01/28/2022 12:24 (5), 03/02/2022 08:44 (2), 12/07/2022 17:51 (3), 12/07/2022 17:58 (27)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.