Vendor description
"Founded in 1996, Numerix has over 19 offices, 700 clients and 90 partners across more than 26 countries. Numerix is recognized across he industry for its many breakthroughs in quantitative research and is proud of its reputation for being able to price and risk manage any derivative instrument – vanillas to the most sophisticated exotic products."
Source: https://www.numerix.com/about-numerix
Business recommendation
The vendor was unresponsive during multiple attempts to contact them via various channels, hence there is no solution available. In case you are using this software, be sure to restrict access and monitor logs. Try to reach out to your contact person for this vendor and request a patch.
SEC Consult highly recommends to perform a thorough security review of the product conducted by security professionals to identify and resolve potential further security issues.
Vulnerability overview/description
1) Reflected Cross-Site Scripting (CVE-2024-50585)
Users who click on a malicious link or visit a website under the control of an attacker can be infected with arbitrary JavaScript which is running in the context of the "Numerix License Server Administration System Login". (FQDN: connect.numerix.com)
Proof of concept
1) Reflected Cross-Site Scripting (CVE-2024-50585)
This vulnerability can be triggered by sending the following POST request:
[ redacted ]The server responds with the injected JavaScript code which is then executed in the browser of the victim.
Figure 1: Cross site scripting
Vulnerable / tested versions
This vulnerability was identified on 5th April 2024. The following version seems to be affected:
- 1.1_596, powered by Orion v2.5.10-083015, Agilis Software