CVE-2020-36283

HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode). By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to upload a configuration file to the device. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities.

CVSS v3 8.8 HIGH
CVSS v2.0 6.8 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/198443	Third Party Advisory VDB Entry
https://www.hidglobal.com/sites/default/files/resource_files/hid-psa-2020-01-omnikey-csrf-security-advisory-paper.pdf	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:hidglobal:omnikey_5427_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hidglobal:omnikey_5427:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:hidglobal:omnikey_5127_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:hidglobal:omnikey_5127:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-03-24 16:15

Updated : 2024-02-28 18:08

NVD link : CVE-2020-36283

Mitre link : CVE-2020-36283

CVE.ORG link : CVE-2020-36283

JSON object : View

Products Affected

hidglobal

omnikey_5427
omnikey_5127_firmware
omnikey_5427_firmware
omnikey_5127

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2020-36283", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}]}, "published": "2021-03-24T16:15:15.277", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/198443", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://www.hidglobal.com/sites/default/files/resource_files/hid-psa-2020-01-omnikey-csrf-security-advisory-paper.pdf", "tags": ["Mitigation", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode). By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to upload a configuration file to the device. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities."}, {"lang": "es", "value": "Los lectores HID OMNIKEY 5427 y OMNIKEY 5127, son vulnerables a un ataque de tipo CSRF cuando es usado el controlador EEM (Ethernet Emulation Mode). Al persuadir a un usuario autenticado para que visite un sitio Web malicioso, un atacante remoto podr\u00eda enviar una petici\u00f3n HTTP malformada para cargar un archivo de configuraci\u00f3n en el dispositivo. Un atacante podr\u00eda explotar esta vulnerabilidad para llevar a cabo ataques de tipo cross-site scripting, envenenamiento de la cach\u00e9 web y otras actividades maliciosas"}], "lastModified": "2021-03-26T21:21:36.637", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hidglobal:omnikey_5427_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21B60A66-E41F-464E-8DAD-616ED41728D3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hidglobal:omnikey_5427:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EA43AE02-4F7F-4471-97E1-2DE9746A4B8E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hidglobal:omnikey_5127_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5C4AA8E-77BF-482A-B705-C765FF69CF72"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hidglobal:omnikey_5127:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "25992920-BB93-4115-B539-E5C375883190"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}