Flexense Sync Breeze Enterprise 10.1.16 Control Protocol SERVER_GET_INFO Packet security check

Summaryinfo

A vulnerability identified as problematic has been detected in Flexense Sync Breeze Enterprise 10.1.16. The impacted element is an unknown function of the component Control Protocol Handler. The manipulation as part of SERVER_GET_INFO Packet leads to security check. This vulnerability is documented as CVE-2017-15664. The attack can be initiated remotely. Additionally, an exploit exists. It is recommended to apply restrictive firewalling.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Flexense Sync Breeze Enterprise 10.1.16. This issue affects some unknown functionality of the component Control Protocol Handler. The manipulation as part of a SERVER_GET_INFO Packet leads to a security check vulnerability. Using CWE to declare the problem leads to CWE-358. The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique. Impacted is availability. The summary by CVE is:

In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 9121.

The bug was discovered 10/19/2017. The weakness was released 01/10/2018 as EDB-ID 43453 as not defined exploit (Exploit-DB). The advisory is shared at exploit-db.com. The identification of this vulnerability is CVE-2017-15664 since 10/19/2017. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are unknown but a public exploit is available. MITRE ATT&CK project uses the attack technique T1211 for this issue.

After immediately, there has been an exploit disclosed. The exploit is available at exploit-db.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 83 days. During that time the estimated underground price was around $0-$5k.

Addressing this vulnerability is possible by firewalling 9121.

The vulnerability is also documented in the vulnerability database at Exploit-DB (43453). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Flexense

Name

• Sync Breeze Enterprise

Version

• 10.1.16

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion