PT-2013-5343 · Hot · Hotbox Router

Publicado 2013-12-30 · Atualizado 2013-12-30 · CVE-2013-5038

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:A/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HOT HOTBOX router version 2.1.11

Description The issue allows remote attackers to bypass authentication by configuring a source IP address that had previously been used for an authenticated session.

Recommendations For version 2.1.11, consider restricting access to the router's configuration interface to minimize the risk of exploitation. As a temporary workaround, implement additional authentication measures, such as MAC address filtering or VPN, to reduce the attack surface until a patch is available.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-5038

Produtos afetados

Hotbox Router

Referências · 4

• 🔥 http://packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.html · Exploit
• 🔥 http://youtube.com/watch?v=CPlT09ZIj48 · Exploit
• 🔥 https://exploit-db.com/exploits/29518 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5038 · Nota de Segurança