CVE-2021-27453 : Security Advisory and Response

Mesa Labs AmegaView authentication bypass vulnerability allows attackers to gain unauthorized access by exploiting default cookies to bypass authentication.

Understanding CVE-2021-27453

This CVE, reported by Stephen Yackey of Securifera to CISA, affects Mesa Labs' AmegaView version 3.0. The vulnerability has a high severity score of 7.3.

What is CVE-2021-27453?

Mesa Labs AmegaView version 3.0 is susceptible to an authentication bypass issue due to the use of default cookies, enabling attackers to access the web application without proper authentication.

The Impact of CVE-2021-27453

The impact is rated as high severity, with attackers being able to bypass authentication and gain unauthorized access to the vulnerable web application.

Technical Details of CVE-2021-27453

The vulnerability has a CVSSv3.1 base score of 7.3 (High) with low complexity, network-based vector, and impacts on confidentiality, integrity, and availability.

Vulnerability Description

Mesa Labs AmegaView 3.0 uses default cookies that could be set to bypass authentication, opening the door for unauthorized access.

Affected Systems and Versions

Only version 3.0 of AmegaView by Mesa Labs is affected by this vulnerability.

Exploitation Mechanism

The vulnerability can be exploited by attackers setting default cookies to bypass authentication and gain unauthorized access.

Mitigation and Prevention

To mitigate the CVE-2021-27453 vulnerability, Mesa Labs recommends users to migrate to the newer ViewPoint software. Additionally, CISA advises specific defensive measures to minimize exploitation risks:

Immediate Steps to Take

Minimize network exposure for all control system devices.
Ensure these systems are not accessible from the Internet.
Implement firewalls to isolate control system networks.
Use secure methods like VPNs for remote access.

Long-Term Security Practices

Regularly update VPNs and ensure they are secure. Keep all devices connected to VPNs updated with the latest security patches.

Patching and Updates

Mesa Labs has scheduled AmegaView for end-of-life in 2021 and will not release updates for this vulnerability. Users are advised to transition to the ViewPoint software compatible with AmegaView hardware.