CVE-2016-1203 - Vulnerability Details - OpenCVE

Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 (Build427) and earlier allows a remote unauthenticated attacker to conduct a man-in-the-middle attack. A successful exploitation may result in a malicious file being downloaded and executed.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Microsoft	Windows
Saat	Netizen Netizen Installer

Configuration 1 [-]

AND

OR	cpe:2.3:a:saat:netizen::::::::
	cpe:2.3:a:saat:netizen_installer::::::::

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://jvn.jp/en/vu/JVNVU97339542/
https://web-support.saat.jp/hc/ja/articles/4406222933785

History

No history.

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2023-10-31T12:38:05.419Z

Updated: 2024-09-06T20:15:41.041Z

Reserved: 2015-12-26T00:00:00.000Z

Link: CVE-2016-1203

Vulnrichment

Updated: 2024-08-05T22:48:13.554Z

NVD

Status : Modified

Published: 2023-10-31T13:15:09.637

Modified: 2024-11-21T02:45:56.960

Link: CVE-2016-1203

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:saat:netizen:*:*:*:*:*:*:*:*", "matchCriteriaId": "B638E8ED-E2B1-4001-AE13-C2230FCC9167", "versionEndIncluding": "1.2.0.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:saat:netizen_installer:*:*:*:*:*:*:*:*", "matchCriteriaId": "0ABF3AFD-DF67-4A1C-B1B3-655875DF0199", "versionEndIncluding": "1.2.0.424", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 (Build427) and earlier allows a remote unauthenticated attacker to conduct a man-in-the-middle attack. A successful exploitation may result in a malicious file being downloaded and executed."}, {"lang": "es", "value": "Vulnerabilidad de verificaci\u00f3n de archivos incorrecta en el instalador de SaAT Netizen versi\u00f3n 1.2.0.424 y anteriores, y SaAT Netizen versi\u00f3n 1.2.0.8 (Build427) y anteriores permite que un atacante remoto no autenticado lleve a cabo un ataque de intermediario. Una explotaci\u00f3n exitosa puede resultar en la descarga y ejecuci\u00f3n de un archivo malicioso."}], "id": "CVE-2016-1203", "lastModified": "2024-11-21T02:45:56.960", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-10-31T13:15:09.637", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU97339542/"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://web-support.saat.jp/hc/ja/articles/4406222933785"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU97339542/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://web-support.saat.jp/hc/ja/articles/4406222933785"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}