Private key for browser-trusted certificate embedded in firmware (Aruba Networks / Alcatel-Lucent products)

This advisory is accompanied by a blog post regarding a recap on our published

"House of Keys" research study on the re-use of cryptographic secrets from

11/2015.

 

For further information also see

blog.sec-consult.com/2016/09/house-of-keys-9-months-later-40-worse.html

 

 

SEC Consult Vulnerability Lab Security Advisory < 20160906-0 >

=======================================================================

title: Private Key For Browser-Trusted Certificate Embedded

In Firmware

product: multiple Aruba Networks / Alcatel-Lucent products

vulnerable version: see Vulnerable / tested versions

fixed version: -

CVE number:

impact: High

homepage: www.arubanetworks.com

enterprise.alcatel-lucent.com

found: 2015-05-15

by: Stefan Viehböck (Office Vienna)

SEC Consult Vulnerability Lab

 

An integrated part of SEC Consult

Bangkok - Berlin - Linz - Montreal - Moscow

Singapore - Vienna (HQ) - Vilnius - Zurich

 

www.sec-consult.com

=======================================================================

 

Vendor description:

-------------------

"Aruba, a Hewlett Packard Enterprise company, (formerly "Aruba Networks, Inc.")

is a networking vendor selling enterprise wireless LAN and edge access

networking equipment. The company has over 1,800 employees and is

headquartered in Sunnyvale, California. Aruba's core products are access points

(APs), mobility controllers, and network management software through their

Airwave Management Platform product."

 

Source: en.wikipedia.org/wiki/Aruba_Networks

 

 

Vulnerability overview/description:

-----------------------------------

A browser-trusted certificate (CN: securelogin.arubanetworks.com, signed by

GeoTrust) including its private key is embedded in the firmware of several

Aruba Networks/Alcatel-Lucent products. The certificate is used for providing

user access to a captive portal and web administration via HTTPS as well as

EAP

connections for WPA2-Enterprise clients.

 

An attacker can use this vulnerability to impersonate a captive portal, web

administration or Wi-Fi AP and gain access to sensitive information.

 

The certificate is compromised and should be revoked. Users should be told to

install certificates generated by themselves.

 

 

Proof of concept:

-----------------

OpenSSL text output for certificate:

Certificate:

Data:

Version: 3 (0x2)

Serial Number: 121426 (0x1da52)

Signature Algorithm: sha1WithRSAEncryption

Issuer: C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA

Validity

Not Before: May 11 01:22:10 2011 GMT

Not After : Aug 11 04:40:59 2017 GMT

Subject: serialNumber=lLUge2fRPkWcJe7boLSVdsKOFK8wv3MF, C=US, O=securelogin.arubanetworks.com, OU=GT28470348, OU=See www.geotrust.com/resources/cps (c)11, OU=Domain Control Validated - QuickSSL(R) Premium, CN=securelogin.arubanetworks.com

Subject Public Key Info:

Public Key Algorithm: rsaEncryption

Public-Key: (2048 bit)

Modulus:

00:d1:b5:ee:fb:d4:89:e9:89:94:c7:15:3a:e4:42:

26:ec:64:aa:db:23:ec:2f:66:0e:1d:39:e0:47:63:

85:76:c6:40:1d:c9:b4:d0:db:90:bf:b9:b2:bf:eb:

17:96:a4:5d:fb:22:8c:c8:8c:4c:24:58:13:9d:16:

c7:0f:10:58:b8:b0:20:89:11:ea:77:67:9c:6b:75:

3b:8c:e6:bf:0a:db:64:56:4b:ab:63:a0:e5:2d:c2:

61:d0:b3:b5:e8:4a:c5:f0:b2:c8:bd:29:96:a3:c4:

7a:00:4b:bb:4d:5c:51:af:a7:ba:4a:a4:80:31:75:

19:f3:93:0f:ed:46:68:60:7f:4d:42:7e:07:f0:22:

45:0f:e3:ac:97:10:2f:dc:08:aa:10:c2:48:51:58:

5f:12:09:52:88:5e:59:cf:59:82:2a:90:36:26:e7:

46:84:bc:ee:16:b1:a5:ee:05:c7:73:8d:35:2f:40:

d9:2b:c8:bf:15:39:63:64:ae:a8:96:13:e5:7c:0f:

d1:0f:f9:4c:26:4a:0b:dd:4d:65:4b:ff:49:e7:7e:

f1:51:17:21:fc:dc:fd:12:57:37:b0:cf:7c:90:b7:

28:84:d5:66:5f:ca:a8:63:81:f0:1a:e5:26:50:7a:

af:b9:d0:e7:42:05:ee:47:16:67:a8:b2:41:31:21:

97:87

Exponent: 65537 (0x10001)

X509v3 extensions:

X509v3 Authority Key Identifier:

keyid:8C:F4:D9:93:0A:47:BC:00:A0:4A:CE:4B:75:6E:A0:B6:B0:B2:7E:FC

X509v3 Key Usage: critical

Digital Signature, Key Encipherment

X509v3 Extended Key Usage:

TLS Web Server Authentication, TLS Web Client Authentication

X509v3 Subject Alternative Name:

DNS:securelogin.arubanetworks.com

X509v3 CRL Distribution Points:

Full Name:

URI:http://gtssldv-crl.geotrust.com/crls/gtssldv.crl

X509v3 Subject Key Identifier:

9D:D0:E4:66:DD:8E:FB:CF:EA:E4:96:52:CC:92:29:67:D5:D3:32:E8

X509v3 Basic Constraints: critical

CA:FALSE

Authority Information Access:

CA Issuers - URI:http:// gtssldv-aia.geotrust.com/gtssldv.crt

Signature Algorithm: sha1WithRSAEncryption

26:63:34:5a:e4:51:61:d9:92:25:35:f8:62:36:cc:5e:7c:6a:

94:72:41:ec:e7:60:10:d0:a7:b9:f7:f0:0b:a6:d2:97:b0:2b:

3e:10:81:ac:20:75:38:d9:c0:0c:50:f2:01:ed:fc:2e:fb:be:

1b:0b:e9:45:49:38:2a:1c:b1:b7:13:27:ef:7b:b2:2d:b9:3c:

0d:85:7e:1e:f0:36:1e:de:80:ef:d7:ad:9c:d0:c2:a1:b7:e0:

d6:51:5a:e5:c7:c4:fa:2a:a6:95:af:93:41:ee:6e:37:ee:08:

d5:b0:12:9f:35:2d:a1:e4:b0:b9:06:6d:35:39:59:72:21:8e:

c2:59:11:a0:4d:ac:e0:1c:5f:d0:36:05:b0:98:da:57:24:92:

12:8b:bd:da:cd:d4:83:b9:52:42:4d:9a:40:0b:38:86:51:8f:

a7:ea:dd:d9:1f:1b:31:db:10:76:2d:18:1c:14:9b:9b:13:f5:

4f:4c:c0:61:9a:a0:58:42:a8:dc:8e:66:d4:a2:87:93:c5:48:

a1:2d:f3:99:29:92:44:bb:2a:0b:2a:7f:75:4f:3d:a6:42:1f:

84:f2:24:0d:0d:7d:aa:bb:bc:00:af:a5:ad:55:ba:ee:3f:d3:

60:dd:70:06:80:ea:56:35:48:16:9f:47:f0:7a:0d:0b:be:ef:

20:54:63:1c

Certificate:
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-----END CERTIFICATE-----

Private Key:
-----BEGIN RSA PRIVATE KEY-----
MIIEpQIBAAKCAQEA0bXu+9SJ6YmUxxU65EIm7GSq2yPsL2YOHTngR2OFdsZAHcm00
NuQv7myv+sXlqRd+yKMyIxMJFgTnRbHDxBYuLAgiRHqd2eca3U7jOa/CttkVkurY6
DlLcJh0LO16ErF8LLIvSmWo8R6AEu7TVxRr6e6SqSAMXUZ85MP7UZoYH9NQn4H8CJ
FD+OslxAv3AiqEMJIUVhfEglSiF5Zz1mCKpA2JudGhLzuFrGl7gXHc401L0DZK8i/
FTljZK6olhPlfA/RD/lMJkoL3U1lS/9J537xURch/Nz9Elc3sM98kLcohNVmX8qoY
4HwGuUmUHqvudDnQgXuRxZnqLJBMSGXhwIDAQABAoIBAQCbwEXIX2g2POp0mb3tfX
wvIe0LaLin02I0LqH2I2Iifsdr2D0kyY3N93tcspwIU/dA574rzJdYftnCWAJrm7Z
pJNZlNxsup5My9BTQZygIRj1VIkoeaocL30yKlo5KAg7U39PbOiIZa3k48wYfRKue
jDH98gMLuG8XymeP0DUBRPKkPV9gQSIaJlyhK8DqC3krC6cE3FIdK4RfDOqinUqff
iVYnNc3qaHrWOO0lnduG5ngRgE6XipUrjf3Y/JfqpEHhjGW4TNZ+2j9U7Vnwp22sc
+/F4SCEDXYC5dGzdgRlTALSe/UNCctB2DcYdSmBqHfekJ1YtXoeLNrcabQIgCRAoG
BAO74O2KbY/kkw3W0XMJsGHJLK0hKCW4WMZl2pqfPwkoXNWJIPl7GYrGnBIQ75fZn
ddlq6Gq8ZfDUZlbE07JAEXUeyNd0m6emqOm7q+v8aY0AKnsH+X2nHI7caYQJu0s5A
y8IB9fdhmpFX40C77M8KJIXIvYjRI7ulJF3ZJBiCOPVAoGBAOCn5mrmcFaxkvuSUs
90OmF0rHVdaNgsFaaFc3B9H9flh7fX38M1ZCBIR01yaPciJOLMsAaBe1UMnaw1rWf
mlnVGt9khFCU2f2IlWc3oPGnkQBhTUrOhufOJg+JzDoS4CiMpQD0yT+FABgSdD+Y4
f8+IFjoqagFyU/l+VAWPtyfrAoGBALn+6THRollrfNqjPENzIP/sc867GWXezlIU4
Jfig+Vo9Pr/IdRgcra1OTW27UEAu+Aybp2M74cnulO0tNSbOzs+b7IKp5Awjm4FzU
VK29iMFYRW66AaLocfFN1ZObbNtCWqCXjBifoy7rDxZSHLJAS5D1QmlRjupyIlnFc
ohqTVAoGBAKLIJgZpiRbYPnd5E/Xr8u1wvBGiqHiSoPFzGy10DKHEWC3XBvUMd8uI
c9njP7lqjS2lQRrFsZbzuD/y+P4jL/w0TLzQ4icAsRZtl//B+hyEXgkCPxeX5QRZL
S3lTqzOKdJGbpypGwZM/M9U+xNG9x1qLyjgWMVJkR1j8v/AnecXAoGALItcXppPW3
TvBQ4KTT/VFz/A/isT7dryB+C6O7FnAf9uGE6w2NlCmmt8Ak5hCo+ZixI1iXudKq7
DdDm31W27PMugRMrn89ghoe3FiKbI7ISVWJKiulo2Pcb3yy5ZDiqMkVcmvmCPzahz
Das7gZ8UdS0D0Tt6h5dim5BnLvQCQPo=
-----END RSA PRIVATE KEY-----

Vulnerable / tested versions:

-----------------------------

This vulnerability is not dependent on specific products/versions. We

found the certificate and private key in firmware for various Alcatel-Lucent

OmniAccess products, potentially other products are affected as well.

 

According to Aruba, "The certificate "securelogin.arubanetworks.com", and

its associated private key, is distributed on every controller and in

every software release."

 

 

Vendor contact timeline:

------------------------

2015-05-21: Contacting vendor through sirt@arubanetworks.com, answer

regarding affected products

2015-05-28: Update from Aruba, certificate for "securelogin.arubanetworks.com"

will not be changed; documentation will be updated to reflect

security issues.

2015-06-08: Certificate will not be revoked, announcement available here:

community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/Certificate-quot-securelogin-arubanetworks-com-quot/td-p/239148

2015-11-25: "House of Keys" research study published regarding re-use of

crypto secrets in firmware of multiple vendors (advisory postponed)

2016-09-05: Follow-up on "House of Keys", publication of Aruba advisory

 

 

Solution:

---------

None available.

 

 

Workaround:

-----------

Users should install a custom certificate signed by a trusted CA.

 

 

Advisory URL:

-------------

www.sec-consult.com/en/Vulnerability-Lab/Advisories.htm

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

SEC Consult Vulnerability Lab

 

SEC Consult

Bangkok - Berlin - Linz - Montreal - Moscow

Singapore - Vienna (HQ) - Vilnius - Zurich

 

About SEC Consult Vulnerability Lab

The SEC Consult Vulnerability Lab is an integrated part of SEC Consult. It

ensures the continued knowledge gain of SEC Consult in the field of network

and application security to stay ahead of the attacker. The SEC Consult

Vulnerability Lab supports high-quality penetration testing and the evaluation

of new offensive and defensive technologies for our customers. Hence our

customers obtain the most current information about vulnerabilities and valid

recommendation about the risk profile of new technologies.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Interested to work with the experts of SEC Consult?

Send us your application www.sec-consult.com/career/

 

Interested in improving your cyber security with the experts of SEC Consult?

Contact our local offices www.sec-consult.com/contact/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Mail: research at sec-consult dot com

Web: www.sec-consult.com

Blog: blog.sec-consult.com

Twitter: twitter.com/sec_consult

 

EOF Stefan Viehböck / @2016