GoAhead, an embedded web server deployed in hundreds of millions of IoT, firewall, OT, and military devices from vendors including Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, and Boeing, contains three independent TLS integration flaws. The issues affect different TLS backends and configurations, leaving revoked client certificates accepted, encrypted sessions recoverable, or chain-depth limits unenforced.
The first flaw impacts the OpenSSL-compatible backend (CVSS 9.1, Critical): GoAhead loads a configured CRL into the certificate store but never enables revocation checking via X509_V_FLAG_CRL_CHECK. Revoked client certificates complete mTLS handshakes even with issuer verification enabled.
The second flaw affects the Libre SSL legacy verifier (CVSS 7.4, High): an over-depth client chain is accepted when VERIFY_PEER=1 and VERIFY_ISSUER=0, bypassing chain-depth restrictions.
The third flaw involves Mbed TLS (CVSS 5.9, Medium): a buffer-length typo reduces a 2048-bit DH modulus to one byte, making TLS 1.2 DHE_RSA sessions decryptable.
Affected versions range from 3.4.5 through 6.1.0. All issues are resolved by upgrading to GoAhead 6.1.1 or later, or by enabling proper verification flags and disabling vulnerable cipher suites.
Source: Hacker News · Summarized by HeadlinesBriefing