Sign In
Advisories

ProSoft ICX35 Login Lockout Bypass via Client-Side Cookies

Go back
Severity
high
Date
Affecting

  • X35-HWC-A <= 1.14.153

  • ICX35-HWC-E <= 1.14.153

CWE
  • CWE-307 Improper Restriction of Excessive Authentication Attempts
  • CWE-602 Client-Side Enforcement of Server-Side Security
CVSS
8.2
CVSS V4 Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Credit
Rustam Amin
Description
ProSoft Technology ICX35 devices (X35-HWC-A and ICX35-HWC-E) contain a login lockout bypass in the integrated module web page. The account lockout mechanism that restricts repeated failed authentication attempts is enforced in client-side JavaScript, so a remote attacker can reset the lockout and continue submitting password guesses by deleting the relevant browser cookies, defeating the brute-force protection. This vulnerability has been addressed in version 1.14.158.

Ready to get Started?

Explore VulnCheck, a next-generation Cyber Threat Intelligence platform, which provides exploit and vulnerability intelligence to help you prioritize and remediate vulnerabilities that matter.
  • Vulnerability Prioritization
    Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.
  • Early Warning System
    Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.
Schedule a Demo