CVE-2023-42419 Improper Management of Cryptographic Keys in the Maintenance Server in QCOW Air-Gapped Distribution (China Edition)
An attacker with admin access can use a hard-coded private key to execute commands on the Cybellum Maintenance Server.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-42419?
CVE-2023-42419 is a low-severity vulnerability in Cybellum Maintenance Server, published on 5 Mar 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Maintenance Server, in Cybellum's QCOW air-gapped distribution (China Edition), versions 2.15.5 through 2.27, was compiled with a hard-coded private cryptographic key.
An attacker with administrative privileges & access to the air-gapped server could potentially use this key to run commands on the server. The issue was resolved in version 2.28. Earlier versions, including all Cybellum 1.x versions, and distributions for the rest of the world remain unaffected.
Which versions are affected by CVE-2023-42419?
How do I fix CVE-2023-42419?
No fix has been published for CVE-2023-42419 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-42419 being exploited?
There is no known exploitation of CVE-2023-42419 in the wild and no public exploit code.
Sources
Also known as GHSA-9vcf-g8ph-g2mx.