Sennheiser Headsetup 7.3.4903

CPE Details

Sennheiser Headsetup 7.3.4903
sennheiser
headsetup
7.3.4903
2018-12-11
18h05 +00:00
2021-08-12
14h58 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:sennheiser:headsetup:7.3.4903:*:*:*:*:*:*:*

Informations

Vendor

sennheiser

Product

headsetup

Version

7.3.4903

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-17612 2018-11-09 20h00 +00:00 Sennheiser HeadSetup 7.3.4903 places Certification Authority (CA) certificates into the Trusted Root CA store of the local system, and publishes the private key in the SennComCCKey.pem file within the public software distribution, which allows remote attackers to spoof arbitrary web sites or software publishers for several years, even if the HeadSetup product is uninstalled. NOTE: a vulnerability-assessment approach must check all Windows systems for CA certificates with a CN of 127.0.0.1 or SennComRootCA, and determine whether those certificates are unwanted.
7.5
High