Vulnerability CVE-2017-17878
Published: 2017-12-27

Description:
An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of the default use of DES (aka the CONFIG_FEATURE_DEFAULT_PASSWD_ALGO="des" setting).

Type:

CWE-327

 (Use of a Broken or Risky Cryptographic Algorithm)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Valvesoftware -> Steam link firmware 

 References:
https://blogger.davidmanouchehri.com/2017/12/steam-link-security-truncated-password.html
https://github.com/ValveSoftware/steamlink-sdk/issues/101
https://github.com/ValveSoftware/steamlink-sdk/issues/110
Copyright 2024, cxsecurity.com

 

Back to Top