by vicarius
log in join community
by @nahuel.vicarius
08 May 2024
#vuln_with_no_assigned_CVE

Analysis blog of a 0-day vulnerability that has no CVE ID assigned to it

publish

Mitigate Untrusted SSL Certificate

by @nahuel.vicarius
by @nahuel.vicarius
08 May 2024
#vuln_with_no_assigned_CVE

Analysis blog of a 0-day vulnerability that has no CVE ID assigned to it

publish

Mitigate Untrusted SSL Certificate

OS

W12
Windows 11 23H2Microsoft
10.0.22631.3007.*
10.0.22631.3007.*
10.0.22631.3007.*
10.0.22631.2861.*
10.0.22631.2715.*
10.0.22631.2715.*
10.0.22631.2506.*
10.0.22631.2506.*
10.0.22631.2428.*
10.0.22631.2428.*

Apps

Openssl
OpensslOpenssl
1.0.1f-1.*
1.0.2g-1.*
1.1.1c-1.*
1.1.1f-1.*
3.0.2-0ubuntu1.17.*
5.9-0.*
3.0.7-27.0.3.*
3.0.13-0.*
6.5.0.64825.*
12.1.10.296.*
Firefox
FirefoxMozilla
129.0.2.0.*
129.0.1.0.*
115.12.*
115.14.*
115.15.0.*
115.14.0.*
129.0.0.0.*
128.0.3.0.*
128.0.3.*
128.0.2.0.*
Chrome
ChromeGoogle
130.0.6703.1.*
130.0.6703.0.*
130.0.6702.0.*
130.0.6701.2.*
130.0.6701.1.*
130.0.6701.0.*
130.0.6700.0.*
130.0.6699.1.*
130.0.6699.2.*
130.0.6699.0.*
Browser
BrowserBrave
1.59.40.*
119.1.62.6.*
119.1.61.51.*
119.1.61.53.*
118.1.59.124.*
118.1.60.102.*
118.1.61.45.*
118.1.59.122.*
118.1.61.39.*
118.1.60.96.*

PoC video

Summary

The script takes a certificate file, password, and site details as input and securely imports the certificate into the Windows certificate store.

general

Description

Tags

#mitigation
users/photos/clzczbqucdb9n1in93j3sf8pl.jpg

@nahuel.vicarius

54 posts

Security Analyst - Vicarius

Total vcoins

26.4K

Social media links

Comments (0)