Critical severity · published Dec 31, 2017
CVE-2017-18001
Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain…
9.8
CVSS
14.1%
EPSS
No
On KEV
Description
Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)14.1% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SW
Secure Web Gateway · Trustwave
through 11.8.0.27 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-18001
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-18001
Exploit
http://seclists.org/fulldisclosure/2017/Dec/88
Exploit
https://blogs.securiteam.com/index.php/archives/3550
www.exploit-db.com
https://www.exploit-db.com/exploits/44047/
Vendor Advisory
https://www.trustwave.com/Resources/Trustwave-Software-Updates/Important-Security-Update-for-Trustwave-Secure-Web-Gateway/