Sign-up

ID

VAR-201207-0139


CVE

CVE-2012-3018


TITLE

ICONICS GENESIS32 and BizViz Vulnerable to access restrictions

Trust: 0.8

sources: JVNDB: JVNDB-2012-003431

DESCRIPTION

The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses an improper encryption algorithm for generation of an authentication code, which allows local users to bypass intended access restrictions and obtain administrative access by predicting a challenge response. GENESIS32/BizViz is a new generation of industrial control software developed by ICONICS. Iconics GENESIS32 and BizViz are prone to a local authentication-bypass vulnerability. Successful exploits may lead to other attacks. Iconics GENESIS32 and BizViz versions 9.22 and prior are vulnerable. ---------------------------------------------------------------------- We are millions! Join us to protect all Pc's Worldwide. Download the new Secunia PSI 3.0 available in 5 languages and share it with your friends: http://secunia.com/psi ---------------------------------------------------------------------- TITLE: ICONICS GENESIS32 / BizViz Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA50116 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50116/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50116 RELEASE DATE: 2012-07-31 DISCUSS ADVISORY: http://secunia.com/advisories/50116/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/50116/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=50116 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: A vulnerability has been reported in ICONICS GENESIS32 and ICONICS BizViz, which can be exploited by malicious, local users to gain escalated privileges. This can be exploited to gain administrative access by predicting a challenge response. SOLUTION: Apply patches. Contact the vendor for further information. PROVIDED AND/OR DISCOVERED BY: ICS-CERT credits Dr. Wesley McGrew, Mississippi State University. ORIGINAL ADVISORY: ICS-CERT: http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-01.pdf OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.7

sources: NVD: CVE-2012-3018 // JVNDB: JVNDB-2012-003431 // CNVD: CNVD-2012-4039 // BID: 54732 // IVD: 91b22ac4-2353-11e6-abef-000c29c66e3d // PACKETSTORM: 115131

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: 91b22ac4-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-4039

AFFECTED PRODUCTS

vendor:iconicsmodel:genesis32scope:eqversion:8.05

Trust: 2.2

vendor:iconicsmodel:bizvizscope:eqversion:9.13

Trust: 2.2

vendor:iconicsmodel:bizvizscope:eqversion:9.01

Trust: 2.2

vendor:iconicsmodel:bizvizscope:eqversion:8.05

Trust: 2.2

vendor:iconicsmodel:bizvizscope:lteversion:9.22

Trust: 1.8

vendor:iconicsmodel:genesis32scope:lteversion:9.22

Trust: 1.8

vendor:iconicsmodel:genesis32scope:eqversion:9.13

Trust: 1.6

vendor:iconicsmodel:genesis32scope:eqversion:9.01

Trust: 1.6

vendor:iconicsmodel:bizvizscope:eqversion:9.1

Trust: 1.6

vendor:iconicsmodel:bizvizscope:eqversion:9.2

Trust: 1.6

vendor:iconicsmodel:bizvizscope:eqversion:9.21

Trust: 1.6

vendor:iconicsmodel:bizvizscope:eqversion:9.20

Trust: 1.6

vendor:iconicsmodel:bizvizscope:eqversion:9.0

Trust: 1.6

vendor:iconicsmodel:bizvizscope:eqversion:9.22

Trust: 1.5

vendor:iconicsmodel:genesis32scope:eqversion:9.21

Trust: 1.0

vendor:iconicsmodel:genesis32scope:eqversion:9.1

Trust: 1.0

vendor:iconicsmodel:genesis32scope:eqversion:9.20

Trust: 1.0

vendor:iconicsmodel:genesis32scope:eqversion:9.2

Trust: 1.0

vendor:iconicsmodel:genesis32scope:eqversion:9.0

Trust: 1.0

vendor:iconicsmodel:genesis32scope:eqversion:9.22

Trust: 0.9

vendor:genesis32model: - scope:eqversion:8.05

Trust: 0.2

vendor:genesis32model: - scope:eqversion:9.0

Trust: 0.2

vendor:genesis32model: - scope:eqversion:9.01

Trust: 0.2

vendor:genesis32model: - scope:eqversion:9.1

Trust: 0.2

vendor:genesis32model: - scope:eqversion:9.2

Trust: 0.2

vendor:genesis32model: - scope:eqversion:9.13

Trust: 0.2

vendor:genesis32model: - scope:eqversion:9.20

Trust: 0.2

vendor:genesis32model: - scope:eqversion:9.21

Trust: 0.2

vendor:genesis32model: - scope:eqversion:*

Trust: 0.2

vendor:bizvizmodel: - scope:eqversion:8.05

Trust: 0.2

vendor:bizvizmodel: - scope:eqversion:9.0

Trust: 0.2

vendor:bizvizmodel: - scope:eqversion:9.01

Trust: 0.2

vendor:bizvizmodel: - scope:eqversion:9.1

Trust: 0.2

vendor:bizvizmodel: - scope:eqversion:9.2

Trust: 0.2

vendor:bizvizmodel: - scope:eqversion:9.13

Trust: 0.2

vendor:bizvizmodel: - scope:eqversion:9.20

Trust: 0.2

vendor:bizvizmodel: - scope:eqversion:9.21

Trust: 0.2

vendor:bizvizmodel: - scope:eqversion:*

Trust: 0.2

sources: IVD: 91b22ac4-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-4039 // BID: 54732 // JVNDB: JVNDB-2012-003431 // CNNVD: CNNVD-201207-599 // NVD: CVE-2012-3018

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2012-3018
value: MEDIUM

Trust: 1.0

NVD: CVE-2012-3018
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201207-599
value: MEDIUM

Trust: 0.6

IVD: 91b22ac4-2353-11e6-abef-000c29c66e3d
value: MEDIUM

Trust: 0.2

nvd@nist.gov: CVE-2012-3018
severity: MEDIUM
baseScore: 4.4
vectorString: AV:L/AC:M/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.4
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

IVD: 91b22ac4-2353-11e6-abef-000c29c66e3d
severity: MEDIUM
baseScore: 4.4
vectorString: AV:L/AC:M/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.4
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

sources: IVD: 91b22ac4-2353-11e6-abef-000c29c66e3d // JVNDB: JVNDB-2012-003431 // CNNVD: CNNVD-201207-599 // NVD: CVE-2012-3018

PROBLEMTYPE DATA

problemtype:CWE-310

Trust: 1.8

sources: JVNDB: JVNDB-2012-003431 // NVD: CVE-2012-3018

THREAT TYPE

local

Trust: 1.0

sources: BID: 54732 // PACKETSTORM: 115131 // CNNVD: CNNVD-201207-599

TYPE

encryption problem

Trust: 0.6

sources: CNNVD: CNNVD-201207-599

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-003431

PATCH
title:CERT Security Updateurl:http://www.iconics.com/certs
Trust: 0.8
title:Iconics GENESIS32/BizViz Local Verification Patch for Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/19400
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2012-4039 // 
            
            
            
            JVNDB: JVNDB-2012-003431

EXTERNAL IDS
db:NVDid:CVE-2012-3018
Trust: 3.5
db:ICS CERTid:ICSA-12-212-01
Trust: 3.1
db:BIDid:54732
Trust: 0.9
db:CNVDid:CNVD-2012-4039
Trust: 0.8
db:CNNVDid:CNNVD-201207-599
Trust: 0.8
db:JVNDBid:JVNDB-2012-003431
Trust: 0.8
db:SECUNIAid:50116
Trust: 0.8
db:IVDid:91B22AC4-2353-11E6-ABEF-000C29C66E3D
Trust: 0.2
db:PACKETSTORMid:115131
Trust: 0.1
sources:
            
            
            IVD: 91b22ac4-2353-11e6-abef-000c29c66e3d // 
            
            
            
            CNVD: CNVD-2012-4039 // 
            
            
            
            BID: 54732 // 
            
            
            
            JVNDB: JVNDB-2012-003431 // 
            
            
            
            PACKETSTORM: 115131 // 
            
            
            
            CNNVD: CNNVD-201207-599 // 
            
            
            
            NVD: CVE-2012-3018

REFERENCES
url:http://www.us-cert.gov/control_systems/pdf/icsa-12-212-01.pdf
Trust: 3.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3018
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-3018
Trust: 0.8
url:http://secunia.com/advisories/50116
Trust: 0.6
url:http://www.securityfocus.com/bid/54732
Trust: 0.6
url:http://www.iconics.com/home/products/hmi-and-scada/genesis32.aspx
Trust: 0.3
url:http://www.iconics.com/
Trust: 0.3
url:http://secunia.com/psi
Trust: 0.1
url:http://secunia.com/vulnerability_intelligence/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=50116
Trust: 0.1
url:http://secunia.com/advisories/50116/#comments
Trust: 0.1
url:http://secunia.com/advisories/50116/
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2012-4039 // 
            
            
            
            BID: 54732 // 
            
            
            
            JVNDB: JVNDB-2012-003431 // 
            
            
            
            PACKETSTORM: 115131 // 
            
            
            
            CNNVD: CNNVD-201207-599 // 
            
            
            
            NVD: CVE-2012-3018

CREDITS
Dr. Wesley McGrew of Mississippi State University
Trust: 0.9
sources:
            
            
            BID: 54732 // 
            
            
            
            CNNVD: CNNVD-201207-599

SOURCES
db:IVDid:91b22ac4-2353-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2012-4039
db:BIDid:54732
db:JVNDBid:JVNDB-2012-003431
db:PACKETSTORMid:115131
db:CNNVDid:CNNVD-201207-599
db:NVDid:CVE-2012-3018

LAST UPDATE DATE
2024-11-23T23:10:02.554000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2012-4039date:2012-08-01T00:00:00
db:BIDid:54732date:2015-03-19T08:11:00
db:JVNDBid:JVNDB-2012-003431date:2012-08-01T00:00:00
db:CNNVDid:CNNVD-201207-599date:2012-08-01T00:00:00
db:NVDid:CVE-2012-3018date:2024-11-21T01:40:07.967

SOURCES RELEASE DATE
db:IVDid:91b22ac4-2353-11e6-abef-000c29c66e3ddate:2012-08-01T00:00:00
db:CNVDid:CNVD-2012-4039date:2012-08-01T00:00:00
db:BIDid:54732date:2012-07-30T00:00:00
db:JVNDBid:JVNDB-2012-003431date:2012-08-01T00:00:00
db:PACKETSTORMid:115131date:2012-07-31T03:57:42
db:CNNVDid:CNNVD-201207-599date:2012-07-30T00:00:00
db:NVDid:CVE-2012-3018date:2012-07-31T10:45:42.467