CVE-2023-3243 : Security Advisory and Response

This CVE-2023-3243 was published on June 28, 2023, by Honeywell. It affects the product BCM-WEB version 3.3.X and is related to privilege escalation (CAPEC-233). The base CVSS score is 8.3, indicating a high severity level.

Understanding CVE-2023-3243

This CVE identifies an authentication bypass vulnerability in the BCM-WEB product version 3.3.X, impacting Alerton systems. The vulnerable hash's poor salting and utilization by an attacker can lead to a successful brute force password attack, potentially creating new unauthorized sessions.

What is CVE-2023-3243?

CVE-2023-3243 allows attackers to capture an authenticating hash from the BCM-WEB product and exploit it to gain unauthorized access to systems, enabling privilege escalation.

The Impact of CVE-2023-3243

The impact of this vulnerability is significant, with a high base severity score reflecting the potential for compromise of confidentiality, integrity, and availability of affected systems.

Technical Details of CVE-2023-3243

This vulnerability falls under the problem types of "CWE-290 Authentication Bypass by Spoofing" and "CWE-326 Inadequate Encryption Strength."

Vulnerability Description

The vulnerability arises due to the poorly salted MD5 hash in the authentication process of the BCM-WEB version 3.3.X, enabling attackers to bypass authentication mechanisms and escalate privileges.

Affected Systems and Versions

The affected product is BCM-WEB version 3.3.X by Alerton. Users of this unsupported product are at risk of exploitation and should take immediate action to mitigate the vulnerability.

Exploitation Mechanism

Attackers can capture the authenticating hash, exploit its weak salting, and conduct brute force attacks to guess passwords, gaining unauthorized access and potentially compromising the system.

Mitigation and Prevention

It is crucial for users to take immediate steps to secure their systems and prevent unauthorized access through this vulnerability.

Immediate Steps to Take

Upgrade to a supported product like Alerton ACM.
Remove or upgrade the end-of-life BCM-WEB version 3.3.X to mitigate the risk of exploitation.

Long-Term Security Practices

Implement robust password policies, utilize strong encryption methods, and regularly update and patch systems to defend against potential vulnerabilities and attacks.

Patching and Updates

Stay informed about security advisories, apply relevant patches promptly, and conduct regular security assessments to ensure the integrity and security of the systems.