Choose Your Backend: Three TLS Bugs in GoAhead - FoxIO | Cyber Innovation
- TLDRGoAhead is used in hundreds of millions of IoT, Firewall, OT, and Military devices including those from Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing, and more.
- Three independent bugs in GoAhead's TLS integrations can leave revoked client certificates accepted, encrypted sessions recoverable to an observer or a configured chain-depth limit unenforced.
- Exposure depends on the TLS library and the verification settings built into the device:OpenSSL-compatible backend - Critical, CVSS 9.1 - CRL loaded but not enforced, re
Unverified
- TLDRGoAhead is used in hundreds of millions of IoT, Firewall, OT, and Military devices including those from Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing, and more.
- Three independent bugs in GoAhead's TLS integrations can leave revoked client certificates accepted, encrypted sessions recoverable to an observer or a configured chain-depth limit unenforced.
- Exposure depends on the TLS library and the verification settings built into the device:OpenSSL-compatible backend - Critical, CVSS 9.1 - CRL loaded but not enforced, re
Sources: Foxio