PT-2017-19199 · E2 · Openwebif Plugin

Bleyelmilo + 3 · Publicado 2017-06-22 · Atualizado 2017-10-13 · CVE-2017-9807

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenWebif plugin through 1.2.4 for E2 open devices

Description An issue in the OpenWebif plugin allows an unauthenticated remote attacker to execute arbitrary Python code or OS commands. This is due to the saveConfig function in "plugin/controllers/models/config.py" performing an eval() call on the contents of the key HTTP GET parameter in the "api/saveconfig" endpoint.

Recommendations For OpenWebif plugin versions through 1.2.4, consider disabling the saveConfig function or restricting access to the "api/saveconfig" endpoint until a patch is available. Avoid using the key parameter in the affected endpoint to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2017-9807

Produtos afetados

Openwebif Plugin

Referências · 6

• 🔥 https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/620 · Exploit
• https://census-labs.com/news/2017/10/02/e2openplugin-openwebif-saveconfig-remote-code-execution · Nota
• http://openwall.com/lists/oss-security/2017/10/02/4 · Nota
• http://securityfocus.com/bid/99232 · Nota
• https://osv.dev/vulnerability/CVE-2017-9807 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9807 · Nota de Segurança