PT-2017-13981 · Airtame · Airtame

Utku Sen · Publicado 2017-10-15 · Atualizado 2017-11-07 · CVE-2017-15304

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Airtame HDMI dongle versions prior to 3.0

Description The issue allows an attacker to set their own session ID via a "Cookie: PHPSESSID=" header in the /bin/login.php file of the Web Panel. This can be used to achieve persistent access to the admin panel even after an admin password change.

Recommendations For versions prior to 3.0, update the firmware to version 3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the /bin/login.php file to minimize the risk of exploitation. Avoid using the PHPSESSID variable in the Cookie header until the issue is resolved.

Correção

Session Fixation

Enumeração de Fraquezas

CWE-384

Identificadores relacionados

CVE-2017-15304

Produtos afetados

Airtame

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-15304 · Aviso do Fabricante
• https://utkusen.com/blog/multiple-vulnerabilities-on-airtame-device-before-version-3.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-15304 · Nota de Segurança