RAD SecFlow-1v up to 2020-05-21 Web-based Management Interface Javascript File Stored cross site scripting

Summaryinfo

A vulnerability has been found in RAD SecFlow-1v up to 2020-05-21 and classified as problematic. Impacted is an unknown function of the component Web-based Management Interface. The manipulation as part of Javascript File leads to cross site scripting (Stored). This vulnerability is uniquely identified as CVE-2020-13260. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in RAD SecFlow-1v up to 2020-05-21. This issue affects an unknown part of the component Web-based Management Interface. The manipulation as part of a Javascript File leads to a cross site scripting vulnerability (Stored). Using CWE to declare the problem leads to CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. Impacted is integrity. The summary by CVE is:

A vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could allow an authenticated attacker to upload a JavaScript file, with a stored XSS payload, that will remain stored in the system as an OVPN file in Configuration-Services-Security-OpenVPN-Config or as the static key file in Configuration-Services-Security-OpenVPN-Static Keys. This payload will execute each time a user opens an affected web page. This could be exploited in conjunction with CVE-2020-13259.

The weakness was disclosed 09/17/2020. The identification of this vulnerability is CVE-2020-13260 since 05/21/2020. The attack may be initiated remotely. A simple authentication is necessary for exploitation. It demands that the victim is doing some kind of user interaction. Technical details are unknown but a public exploit is available. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

The exploit is available at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (48807). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• RAD

Name

• SecFlow-1v

Version

• 2020-05-21

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion