CVE Vulnerabilities

CVE-2020-27374

Authentication Bypass by Capture-replay

Published: Apr 07, 2022 | Modified: Apr 14, 2022
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.9 HIGH
AV:A/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to a Replay Attack to BP Monitoring.

Weakness

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

Affected Software

Name Vendor Start Version End Version
Icheck_connect_bp_monitor_bp_testing_118_firmware Drtrustusa 1.2.1 (including) 1.2.1 (including)

Potential Mitigations

References