CVE-2018-17612

moderate-risk
Published 2018-11-09

Sennheiser HeadSetup 7.3.4903 places Certification Authority (CA) certificates into the Trusted Root CA store of the local system, and publishes the private key in the SennComCCKey.pem file within the public software distribution, which allows remote attackers to spoof arbitrary web sites or software publishers for several years, even if the HeadSetup product is uninstalled. NOTE: a vulnerability-assessment approach must check all Windows systems for CA certificates with a CN of 127.0.0.1 or SennComRootCA, and determine whether those certificates are unwanted.

Do I need to act?

-
0.72% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (19)

Headsetup

Affected Vendors

Microsoft Sennheiser

References (6)

Third Party Advisory http://www.securityfocus.com/bid/106045
Patch https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180029
Exploit https://www.secorvo.de/publikationen/headsetup-vulnerability-report-secorvo-2018...
Third Party Advisory http://www.securityfocus.com/bid/106045
Patch https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180029
Exploit https://www.secorvo.de/publikationen/headsetup-vulnerability-report-secorvo-2018...
47
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 2/34 · Minimal
Exposure 19/34 · Moderate