March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2019-13933 – ICS: Advisory on Siemens SCALANCE X Switches
January 15, 2020
Rewterz Threat Advisory – CVE-2019-14613 – Intel VTune Amplifier for Windows Privilege Escalation Vulnerability
January 15, 2020
Rewterz Threat Advisory – CVE-2019-13933 – ICS: Advisory on Siemens SCALANCE X Switches
January 15, 2020
Rewterz Threat Advisory – CVE-2019-14613 – Intel VTune Amplifier for Windows Privilege Escalation Vulnerability
January 15, 2020
Severity
High
Analysis summary
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.
An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source. The user would have no way of knowing the file was malicious, because the digital signature would appear to be from a trusted provider.
Impact
Spoof Validity
Remediation
Apply update Microsoft Update for CVE-2020-0601