Kieback & Peter DDC4002 up to 1.17.6 Password Hash /etc/passwd insufficiently protected credentials

Summaryinfo

A vulnerability described as problematic has been identified in Kieback & Peter DDC4040e, DDC4020e, DDC4400e, DDC4200e, DDC4002e, DDC4400, DDC4200-L, DDC4200, DDC4100 and DDC4002 up to 1.17.6. This issue affects some unknown processing of the file /etc/passwd of the component Password Hash Handler. The manipulation results in insufficiently protected credentials. This vulnerability was named CVE-2024-43812. The attack needs to be approached locally. There is no available exploit.

Detailsinfo

A vulnerability classified as problematic has been found in Kieback & Peter DDC4040e, DDC4020e, DDC4400e, DDC4200e, DDC4002e, DDC4400, DDC4200-L, DDC4200, DDC4100 and DDC4002 up to 1.17.6. Affected is an unknown code block of the file /etc/passwd of the component Password Hash Handler. The manipulation with an unknown input leads to a insufficiently protected credentials vulnerability. CWE is classifying the issue as CWE-522. The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. This is going to have an impact on confidentiality. CVE summarizes:

Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthenticated attacker with access to /etc/passwd to read the password hashes of all users on the system.

The weakness was presented by Raphael Ruf as icsa-24-291-05. The advisory is available at cisa.gov. This vulnerability is traded as CVE-2024-43812 since 08/21/2024. The exploitability is told to be easy. Local access is required to approach this attack. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1552 by the MITRE ATT&CK project.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Kieback & Peter

Name

• DDC4002
• DDC4002e
• DDC4020e
• DDC4040e
• DDC4100
• DDC4200
• DDC4200-L
• DDC4200e
• DDC4400
• DDC4400e

Version

• 1.17.0
• 1.17.1
• 1.17.2
• 1.17.3
• 1.17.4
• 1.17.5
• 1.17.6

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion