Cisco’s Talos threat intelligence and research unit on Wednesday disclosed the details of several SMB-related vulnerabilities patched recently by Apple in its macOS operating system.
SMB, which stands for Server Message Block, is a protocol for sharing files, printers, and serial ports. Apple’s own SMB stack is called SMBX.
Talos disclosed seven vulnerabilities found in SMBX server components and also detailed the process it used to identify them. One of the security holes was fixed silently by Apple, one was addressed in April, and the rest were patched in May with the release of macOS Big Sur 11.4.
The vulnerabilities are mitigated by the fact that their exploitation requires authentication, but Talos warned that “they are readily exploitable in environments with advanced authentication mechanisms.”
An attacker can exploit the vulnerabilities by sending specially crafted packets to the targeted server.
Three of the flaws have been assigned a severity rating of high and the rest have been classified as medium severity.
Of the high-severity issues, two could allow arbitrary code execution on the targeted server or denial-of-service (DoS) attacks. The third high-severity vulnerability can lead to information disclosure, DoS, or a cryptographic check bypass.
“SmbX is a proprietary implementation of a protocol that has led to some well-known vulnerabilities. This makes it a very interesting target, especially with the growing presence of macOS machines in today’s network environments,” Talos researcher Aleksandar Nikolich, who has been credited by Apple for reporting these vulnerabilities, wrote in a blog post.
Related: SMBGhost Vulnerability Allows Privilege Escalation on Windows Systems
Related: Microsoft Working on Patches for Wormable SMB Vulnerability
Related: ‘SMBleed’ Vulnerability Impacts Windows SMB Protocol
Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
More from Eduard Kovacs
- Industrial Giant ABB Confirms Ransomware Attack, Data Theft
- Zyxel Firewalls Hacked by Mirai Botnet
- New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grids
- Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations
- Zero-Day Vulnerability Exploited to Hack Barracuda Email Security Gateway Appliances
- OAuth Vulnerabilities in Widely Used Expo Framework Allowed Account Takeovers
- New Honeywell OT Cybersecurity Solution Helps Identify Vulnerabilities, Threats
- Rheinmetall Says Military Business Not Impacted by Ransomware Attack
Latest News
- Industrial Giant ABB Confirms Ransomware Attack, Data Theft
- Organizations Worldwide Targeted in Rapidly Evolving Buhti Ransomware Operation
- Google Cloud Users Can Now Automate TLS Certificate Lifecycle
- Zyxel Firewalls Hacked by Mirai Botnet
- Watch Now: Threat Detection and Incident Response Virtual Summit
- NCC Group Releases Open Source Tools for Developers, Pentesters
- Memcyco Raises $10 Million in Seed Funding to Prevent Website Impersonation
- New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grids
