VulnerabilityModified
CVE-2017-18001
Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI.
CRITICAL 9.8EPSS 13.8%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 13.8%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI.
- CVSS 3.0
- 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 13.82% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-306
- Affected
- trustwave/secure web gateway
- Source
- cve@mitre.org
References
- http://seclists.org/fulldisclosure/2017/Dec/88Exploit, Mailing List, Third Party Advisory
- https://blogs.securiteam.com/index.php/archives/3550Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/44047/
- https://www.trustwave.com/Resources/Trustwave-Software-Updates/Important-Security-Update-for-Trustwave-Secure-Web-Gateway/Vendor Advisory
- http://seclists.org/fulldisclosure/2017/Dec/88Exploit, Mailing List, Third Party Advisory
- https://blogs.securiteam.com/index.php/archives/3550Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/44047/
- https://www.trustwave.com/Resources/Trustwave-Software-Updates/Important-Security-Update-for-Trustwave-Secure-Web-Gateway/Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.