Allele Security Alert
ASA-2019-00324, CVE-2019-8282, KLCERT-19-029
Man-in-the-middle (MITM) attack due to the use of cleartext communication
Gemalto Admin Control Center
Gemalto Admin Control Center all versions prior to 7.92
Gemalto Admin Control Center version 7.92
Proof of concept
Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs.
This allows attacker to do man-in-the-middle (MITM) attack and replace original language pack by malicious one.
Artem Zinenko (Kaspersky Lab ICS CERT)
KLCERT-19-029: Gemalto Admin Control Center uses cleartext communication with www3.safenet-inc.com
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: June 10, 2019