PT-2016-3222 · Dnalims · Dnalims

H00Die + 2 · Publicado 2016-11-06 · Atualizado 2019-10-03 · CVE-2017-6526

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dnaLIMS version 4-2015s13

Description The issue concerns an improperly protected administrative web shell, allowing unauthenticated command execution. This can be exploited through cgi-bin/dna/sysAdmin.cgi using specially crafted POST requests, enabling a remote attacker to execute arbitrary commands. The vulnerability is related to the lack of input data sanitization measures in the administrative web shell of the dnaLIMS software.

Recommendations For dnaLIMS version 4-2015s13, consider disabling access to the cgi-bin/dna/sysAdmin.cgi endpoint until a patch is available to prevent exploitation. Restricting access to this administrative web shell can help minimize the risk of command execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Improper Authentication

Enumeração de Fraquezas

CWE-77

CWE-287

Identificadores relacionados

BDU:2017-02590

CVE-2017-6526

Produtos afetados

Dnalims

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dnalims_admin_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/41578 · Exploit
• 🔥 https://shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-6526 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6526 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-02590 · Nota de Segurança
• http://securityfocus.com/bid/96823 · Nota
• https://dnatools.mskcc.org · Nota