by vicarius
log in join community
by @nahuel.vicarius
08 May 2024
#vuln_with_no_assigned_CVE

Analysis blog of a 0-day vulnerability that has no CVE ID assigned to it

publish

Mitigate Untrusted SSL Certificate

by @nahuel.vicarius
by @nahuel.vicarius
08 May 2024
#vuln_with_no_assigned_CVE

Analysis blog of a 0-day vulnerability that has no CVE ID assigned to it

publish

Mitigate Untrusted SSL Certificate

OS

W12
Windows 11 23H2Microsoft
10.0.22631.6649.*
10.0.22631.6649.*
10.0.22631.6783.*
10.0.22631.6783.*
10.0.22631.7079.*
10.0.22631.7079.*
10.0.22631.6936.*
10.0.22631.6936.*
10.0.22631.6345.*
10.0.22631.6345.*

Apps

Openssl
OpensslOpenssl
1.1.1ze.*
1.0.2zn.*
3.5.1-7.0.1.*
15.0.9.382.*
3.0.18-1.*
1.1.1d-2.*
21.0.0-150400.10.1.*
6.13-0.*
1.4.4051.*
1.2.31-1.*
Firefox
FirefoxMozilla
151.0.3.*
151.0.1.*
115.36.0.*
151.0.0.0.*
151.0.3.0.*
140.10.2.*
115.35.2.*
150.0.2.0.*
150.0.2.*
151.0.2.0.*
Chrome
ChromeGoogle
151.0.7880.0.*
151.0.7879.0.*
151.0.7878.1.*
151.0.7878.0.*
151.0.7877.1.*
151.0.7877.0.*
151.0.7876.0.*
151.0.7875.2.*
151.0.7875.0.*
148.0.7778.254.*
Browser
BrowserBrave
147.1.89.143.*
147.1.89.141.*
147.1.89.132.*
146.1.88.136.*
146.1.88.134.*
145.1.87.192.*
145.1.87.190.*
145.1.87.186.*
144.1.86.148.*
144.1.86.142.*

PoC video

Summary

The script takes a certificate file, password, and site details as input and securely imports the certificate into the Windows certificate store.

general

Description

Tags

#mitigation
users/photos/clzczbqucdb9n1in93j3sf8pl.jpg

@nahuel.vicarius

135 posts

Security Analyst - Vicarius

Total vcoins

2.8K

Social media links

Comments (0)