PT-2014-2661 · Trendnet · Tew-812Dru

Publicado 2014-02-04 · Atualizado 2014-02-05 · CVE-2013-3098

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-812DRU router versions prior to 1.0.9.0

Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including changing admin credentials via a request to setSysAdm.cgi, enabling remote management or port forwarding in an Apply action to uapply.cgi, and having unspecified impact via a request to setNTP.cgi.

Recommendations For versions prior to 1.0.9.0, update the firmware to version 1.0.9.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the setSysAdm.cgi, uapply.cgi, and setNTP.cgi endpoints until the firmware is updated.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2013-3098

Produtos afetados

Tew-812Dru

Referências · 7

• 🔥 http://securityevaluators.com/knowledge/case_studies/routers/trendnet_tew-812dru.php · Exploit
• 🔥 http://securityevaluators.com/content/case-studies/routers/Vulnerability_Catalog.pdf · Exploit
• 🔥 http://infosec42.blogspot.com/2013/07/exploit-trendnet-tew-812dru-csrfcommand.html · Exploit
• 🔥 https://exploit-db.com/exploits/27177 · Exploit
• http://osvdb.org/95803 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3098 · Nota de Segurança
• http://secunia.com/advisories/54310 · Aviso do Fabricante