certfr_avis - certfr-2024-avi-0803

CERTFR-2024-AVI-0803

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité a été découverte dans TheGreenBow VPN Client. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
TheGreenBow	VPN Client	VPN Client versions antérieures à 2.5 pour macOS
TheGreenBow	VPN Client	VPN Client versions antérieures à 3.4 pour Linux (Ubuntu 22.04 et Red Hat 9)
TheGreenBow	VPN Client	VPN Client Enterprise sans le correctif de sécurité 7.5.008 pour Windows
TheGreenBow	VPN Client	VPN Client Standard sans le correctif de sécurité 6.87.109 pour Windows
TheGreenBow	VPN Client	VPN Client versions antérieures à 6.4 pour Android

References

Title

Publication Time

Tags

Bulletin de sécurité TheGreenBow 17024

2024-09-24

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "VPN Client versions ant\u00e9rieures \u00e0 2.5 pour macOS",
      "product": {
        "name": "VPN Client",
        "vendor": {
          "name": "TheGreenBow",
          "scada": false
        }
      }
    },
    {
      "description": "VPN Client versions ant\u00e9rieures \u00e0 3.4 pour Linux (Ubuntu 22.04 et Red Hat 9)",
      "product": {
        "name": "VPN Client",
        "vendor": {
          "name": "TheGreenBow",
          "scada": false
        }
      }
    },
    {
      "description": "VPN Client Enterprise sans le correctif de s\u00e9curit\u00e9 7.5.008 pour Windows",
      "product": {
        "name": "VPN Client",
        "vendor": {
          "name": "TheGreenBow",
          "scada": false
        }
      }
    },
    {
      "description": "VPN Client Standard sans le correctif de s\u00e9curit\u00e9 6.87.109 pour Windows",
      "product": {
        "name": "VPN Client",
        "vendor": {
          "name": "TheGreenBow",
          "scada": false
        }
      }
    },
    {
      "description": "VPN Client versions ant\u00e9rieures \u00e0 6.4 pour Android",
      "product": {
        "name": "VPN Client",
        "vendor": {
          "name": "TheGreenBow",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-45750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45750"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0803",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-09-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans TheGreenBow VPN Client. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Vuln\u00e9rabilit\u00e9 dans TheGreenBow VPN Client ",
  "vendor_advisories": [
    {
      "published_at": "2024-09-24",
      "title": "Bulletin de s\u00e9curit\u00e9 TheGreenBow 17024",
      "url": "https://www.thegreenbow.com/en/support/security-alerts/#deeplink-17024"
    }
  ]
}

CVE-2024-45750 (GCVE-0-2024-45750)

Vulnerability from cvelistv5 – Published: 2024-09-25 00:00 – Updated: 2024-09-26 19:02

Summary

An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterprise VPN Client 7.5.007 (and older), Android VPN Client 6.4.5 (and older) VPN Client Linux 3.4 (and older), VPN Client MacOS 2.4.10 (and older) allows a remote attacker to execute arbitrary code via the IKEv2 Authentication phase, it accepts malformed ECDSA signatures and establishes the tunnel.

Severity ?

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE

Assigner

mitre

References

URL

Tags

	https://thegreenbow.com
	https://www.thegreenbow.com/en/support/security-a…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:thegreenbow:android_vpn:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "android_vpn",
            "vendor": "thegreenbow",
            "versions": [
              {
                "lessThanOrEqual": "6.4.5",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:thegreenbow:vpn_client_linux:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "vpn_client_linux",
            "vendor": "thegreenbow",
            "versions": [
              {
                "lessThanOrEqual": "3.4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:thegreenbow:windows_standard_vpn:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "windows_standard_vpn",
            "vendor": "thegreenbow",
            "versions": [
              {
                "lessThanOrEqual": "6.87.108",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:thegreenbow:windows_enterprise_vpn:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "windows_enterprise_vpn",
            "vendor": "thegreenbow",
            "versions": [
              {
                "lessThanOrEqual": "7.5.007",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:thegreenbow:vpn_client_macos:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "vpn_client_macos",
            "vendor": "thegreenbow",
            "versions": [
              {
                "lessThanOrEqual": "2.4.10",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-45750",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T18:48:36.428721Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-287",
                "description": "CWE-287 Improper Authentication",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-26T19:02:46.569Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterprise VPN Client 7.5.007 (and older), Android VPN Client 6.4.5 (and older) VPN Client Linux 3.4 (and older), VPN Client MacOS 2.4.10 (and older) allows a remote attacker to execute arbitrary code via the IKEv2 Authentication phase, it accepts malformed ECDSA signatures and establishes the tunnel."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-25T17:44:35.717372",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://thegreenbow.com"
        },
        {
          "url": "https://www.thegreenbow.com/en/support/security-alerts/#deeplink-17024"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-45750",
    "datePublished": "2024-09-25T00:00:00",
    "dateReserved": "2024-09-06T00:00:00",
    "dateUpdated": "2024-09-26T19:02:46.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2024-AVI-0803

Solutions

CVE-2024-45750 (GCVE-0-2024-45750)

Tags

Sightings

Nomenclature