CVE-2023-34758
published 2023-08-28CVE-2023-34758: Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and…
PriorityP339high8.1CVSS 3.1
AVNACHPRNUINSUCHIHAH
EPSS
0.59%
44.2th percentile
Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bishopfox | sliver | >= 1.5.0 < 1.5.40 | 1.5.40 |
| github.com | bishopfox_sliver | >= 1.5.0 < 1.5.40 | 1.5.40 |
CVSS provenance
nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
ghsa8.1HIGH
osv8.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Silver vulnerable to MitM attack against implants due to a cryptography vulnerability in github.com/bishopfox/sliver
osv·2024-08-20
CVE-2023-34758 Silver vulnerable to MitM attack against implants due to a cryptography vulnerability in github.com/bishopfox/sliver
Silver vulnerable to MitM attack against implants due to a cryptography vulnerability in github.com/bishopfox/sliver
Silver vulnerable to MitM attack against implants due to a cryptography vulnerability in github.com/bishopfox/sliver
GHSA
Silver vulnerable to MitM attack against implants due to a cryptography vulnerability
ghsa·2023-06-21·CVSS 8.1
CVE-2023-34758 [HIGH] CWE-327 Silver vulnerable to MitM attack against implants due to a cryptography vulnerability
Silver vulnerable to MitM attack against implants due to a cryptography vulnerability
### Summary
The current cryptography implementation in Sliver up to version 1.5.39 allows a MitM with access to the corresponding implant binary to execute arbitrary codes on implanted devices via intercepted and crafted responses. (Reserved CVE ID: CVE-2023-34758)
### Details
Please see [the PoC repo](https://github.com/tangent65536/Slivjacker).
### PoC
Please also see [the PoC repo](https://github.com/tangent65536/Slivjacker).
To setup a simple PoC environment,
1. Generate an implant with its C2 set to the PoC server's address and copy the embedded private implant key and public server key into the config json.
2. Run the implant on a separate VM and a `notepad.exe` window should pop up on the implan
OSV
Silver vulnerable to MitM attack against implants due to a cryptography vulnerability
osv·2023-06-21·CVSS 8.1
CVE-2023-34758 [HIGH] Silver vulnerable to MitM attack against implants due to a cryptography vulnerability
Silver vulnerable to MitM attack against implants due to a cryptography vulnerability
### Summary
The current cryptography implementation in Sliver up to version 1.5.39 allows a MitM with access to the corresponding implant binary to execute arbitrary codes on implanted devices via intercepted and crafted responses. (Reserved CVE ID: CVE-2023-34758)
### Details
Please see [the PoC repo](https://github.com/tangent65536/Slivjacker).
### PoC
Please also see [the PoC repo](https://github.com/tangent65536/Slivjacker).
To setup a simple PoC environment,
1. Generate an implant with its C2 set to the PoC server's address and copy the embedded private implant key and public server key into the config json.
2. Run the implant on a separate VM and a `notepad.exe` window should pop up on the implan
No detection rules found.
No public exploits indexed.
https://github.com/BishopFox/sliver/releases/tag/v1.5.40https://github.com/advisories/GHSA-8jxm-xp43-qh3qhttps://github.com/tangent65536/Slivjackerhttps://www.chtsecurity.com/news/04f41dcc-1851-463c-93bc-551323ad8091https://github.com/BishopFox/sliver/releases/tag/v1.5.40https://github.com/advisories/GHSA-8jxm-xp43-qh3qhttps://github.com/tangent65536/Slivjackerhttps://www.chtsecurity.com/news/04f41dcc-1851-463c-93bc-551323ad8091
2023-08-28
Published