Genian Ssl Pns Frodo Core
Monthly
Improper privilege management in Genian SSL PNS (the Frodo-Core and Watchcat-UI components) lets an authenticated administrator who can run CSV bulk user registration escalate to super administrator and then force the creation of an operating-system-level account by manipulating the permission column of the uploaded CSV. The issue is classified as CWE-269 and scored 7.5 by the reporting CNA under CVSS 4.0 (AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L), which shows the attack is network-reachable but requires a pre-existing high-privileged account and a non-default attack precondition (AT:P) tied to deployments that actually expose the bulk-registration import workflow. No public exploit code has been identified at time of analysis and there is no evidence of active exploitation; the vendor has published an advisory (GHSA-8mjh-295r-5hf2) covering both affected components.
Multi-factor authentication bypass in Genian SSL PNS (Frodo-Core) lets an attacker who already holds valid first-factor credentials reach an authenticated session without completing the MFA step by manipulating a login request parameter, as the login handler fails to enforce authorization checks on that parameter (CWE-862). The vendor's CVSS 4.0 score is 7.3 (AV:N/AC:L/AT:P/PR:L/UI:N), while an independent assessment rates it CVSS 3.1 7.3 with a high attack complexity (AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L), reflecting that the bypass requires a present attack-requirement condition and a working password or low-privilege account rather than being unauthenticated; no public exploit code has been identified at time of analysis, and no CISA KEV entry exists, so the practical risk is concentrated in organizations that actually operate Genian SSL PNS with MFA enforced.
Genian SSL PNS (both the frodo-core and watchcat-ui components) performs insufficient file extension and integrity verification on files submitted through its patch/update upload feature, so an artifact that is not an official vendor patch can be accepted by the appliance. Exploitation requires a high-privileged local actor on the appliance plus a specific non-default precondition (CVSS:4.0 AV:L/AC:H/AT:P/PR:H/UI:N), and the resulting impact is limited to integrity (VI:L) with no confidentiality or availability effect, giving a base score of 1.8 - a low-priority, high-friction issue despite belonging to the usually severe CWE-434 unrestricted upload class. No confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis; KR-CERT is credited with reporting the issue.
Improper privilege management in Genian SSL PNS (the Frodo-Core and Watchcat-UI components) lets an authenticated administrator who can run CSV bulk user registration escalate to super administrator and then force the creation of an operating-system-level account by manipulating the permission column of the uploaded CSV. The issue is classified as CWE-269 and scored 7.5 by the reporting CNA under CVSS 4.0 (AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L), which shows the attack is network-reachable but requires a pre-existing high-privileged account and a non-default attack precondition (AT:P) tied to deployments that actually expose the bulk-registration import workflow. No public exploit code has been identified at time of analysis and there is no evidence of active exploitation; the vendor has published an advisory (GHSA-8mjh-295r-5hf2) covering both affected components.
Multi-factor authentication bypass in Genian SSL PNS (Frodo-Core) lets an attacker who already holds valid first-factor credentials reach an authenticated session without completing the MFA step by manipulating a login request parameter, as the login handler fails to enforce authorization checks on that parameter (CWE-862). The vendor's CVSS 4.0 score is 7.3 (AV:N/AC:L/AT:P/PR:L/UI:N), while an independent assessment rates it CVSS 3.1 7.3 with a high attack complexity (AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L), reflecting that the bypass requires a present attack-requirement condition and a working password or low-privilege account rather than being unauthenticated; no public exploit code has been identified at time of analysis, and no CISA KEV entry exists, so the practical risk is concentrated in organizations that actually operate Genian SSL PNS with MFA enforced.
Genian SSL PNS (both the frodo-core and watchcat-ui components) performs insufficient file extension and integrity verification on files submitted through its patch/update upload feature, so an artifact that is not an official vendor patch can be accepted by the appliance. Exploitation requires a high-privileged local actor on the appliance plus a specific non-default precondition (CVSS:4.0 AV:L/AC:H/AT:P/PR:H/UI:N), and the resulting impact is limited to integrity (VI:L) with no confidentiality or availability effect, giving a base score of 1.8 - a low-priority, high-friction issue despite belonging to the usually severe CWE-434 unrestricted upload class. No confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis; KR-CERT is credited with reporting the issue.