CVE-2023-39458 Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability

Medium 5.3 Published 3 May 2024 Updated 2 Aug 2024

Network-adjacent attackers can bypass authentication in Triangle MicroWorks SCADA Data Gateway by exploiting a hard-coded default SSL certificate.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-39458?

CVE-2023-39458 is a medium-severity vulnerability in Triangle MicroWorks SCADA Data Gateway, published on 3 May 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of certificates. The service uses a hard-coded default SSL certificate. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-20509.

Weakness: CWE-798

Which versions are affected by CVE-2023-39458?

It affects 1 product.

Products include Trianglemicroworks Scada Data Gateway.

How do I fix CVE-2023-39458?

No fix has been published for CVE-2023-39458 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-39458 being exploited?

There is no known exploitation of CVE-2023-39458 in the wild and no public exploit code.

Sources

Also known as GHSA-v7hm-ffjj-p8g7.