167 – Insecure service configuration - Wireless Certificates
Description
Certificates provide a more secure form of network authentication. These could be stealed for a malware for use communications fraud and data exfiltration, furthermore, non-existent or faulty validation of the access point certificate, allows attackers to obtain the challenge response values used in authentication. Attackers could use this data to bruteforce the password hash for the legitimate network.
Impact
- Falsify business services, corrupting the trust provided by a valid certificate, so that sensitive communications can be decrypted. - Exploit for entry due to unsecured or lightly protected wireless access.
Recommendation
Install correct certificates on servers, revoke vulnerable ones and validate new keys and certificates are installed and working.
Threat
Authenticated attacker from the Internet.
Expected Remediation Time
Score 4.0
Default score using CVSS 4.0. It may change depending on the context of the src.
Base 4.0
- Attack vector: N
- Attack complexity: L
- Attack Requirements: N
- Privileges required: L
- User interaction: N
- Confidentiality (VC): L
- Integrity (VI): L
- Availability (VA): N
- Confidentiality (SC): N
- Integrity (SI): N
- Availability (SA): N
Threat 4.0
- Exploit maturity: X