Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 03/11/2021, correctif exigé avant le 03/05/2022 pour les agences fédérales américaines.

Action requise : Apply updates per vendor instructions.

Description officielle (NVD)

Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source. A successful exploit could also allow the attacker to conduct man-in-the-middle attacks and decrypt confidential information on user connections to the affected software. The vulnerability is also known under the moniker of CurveBall.

Preuves de concept publiques (35)

Dépôts tiers non vérifiés, parfois piégés. Ne les exécutez jamais en production : uniquement dans un environnement de test isolé.

ly4k/CurveBall · ★ 890 · 15/01/2020
PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)
kudelskisecurity/chainoffools · ★ 336 · 15/01/2020
A PoC for CVE-2020-0601
gentilkiwi/curveball · ★ 78 · 20/01/2020
CVE-2020-0601 #curveball - Alternative Key Calculator
saleemrashid/badecparams · ★ 66 · 16/01/2020
Proof of Concept for CVE-2020-0601
0xxon/cve-2020-0601 · ★ 35 · 15/01/2020
Zeek package to detect CVE-2020-0601
eastmountyxz/CVE-2020-0601-EXP · ★ 30 · 17/02/2020
这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，理解ECC算法、Windows验证机制，并尝试自己复现可执行文件签名证书和HTTPS劫持的例子。作为网络安全初学者，自己确实很菜，但希望坚持下去，加油！
ioncodes/Curveball · ★ 20 · 28/01/2020
PoC for CVE-2020-0601 - CryptoAPI exploit
0xxon/cve-2020-0601-plugin · ★ 5 · 15/01/2020
Zeek package that uses OpenSSL to detect CVE-2020-0601 exploit attempts
RrUZi/Awesome-CVE-2020-0601 · ★ 5 · 16/01/2020
😂An awesome curated list of repos for CVE-2020-0601.
IIICTECH/-CVE-2020-0601-ECC---EXPLOIT · ★ 3 · 19/01/2020
CurveBall (CVE-2020-0601) - PoC CVE-2020-0601, or commonly referred to as CurveBall, is a vulnerability in which the signature of certificates using elliptic curve cryptography (ECC) is not correctly