A vulnerability, which was classified as critical, has been found in Tacitine EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 up to 22.20.1. This issue affects an unknown part of the component Web-based Management Interface. The manipulation with an unknown input leads to a session fixiation vulnerability. Using CWE to declare the problem leads to CWE-384. Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to perform session fixation on the targeted device.

The weakness was presented 09/24/2022 by Firewall. The advisory is shared at tacitine.com. The identification of this vulnerability is CVE-2022-40630 since 09/13/2022. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-279073, VDB-279081, VDB-279084 and VDB-279086 for similar entries.

Productinfo

Vendor

• Tacitine

Name

• EN6200-PRIME QUAD-35
• EN6200-PRIME QUAD-100

Version

• 22.20.0
• 22.20.1

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion