An origin validation error in the NICMx FORT-validator software, versions prior to 1.6.8, creates a high-severity risk for route-origin data integrity.

This issue is an origin validation error (CWE-346) that allows an authenticated attacker to manipulate route-origin data. The vulnerability requires low privileges and local access conditions to successfully exploit.

Successful exploitation could result in the injection of malicious route-origin data, potentially leading to traffic redirection or interception within a network. With a CVSS score of 7.2, the impact on network infrastructure availability and data integrity is significant, particularly for organizations relying on RPKI for BGP security.

Immediate Action: Upgrade to FORT-validator version 1.6.8 or newer immediately to address the validation logic flaw.

Proactive Monitoring: Review RPKI validation logs for anomalous entries or unexpected changes in route-origin data.

Compensating Controls: Implement strict network access control lists to limit the number of users who can interact with the validator interface.

Public Exploit Available: No (exploit_available: false)

Maintaining the integrity of RPKI data is critical for network security. Given the potential for route manipulation, organizations should deploy the 1.6.8 patch without delay to ensure the validator correctly processes route-origin data.