PT-2017-2688 · Ecoscentric · Ecos Embedded Web Servers+1

Publicado 2017-07-13 · Atualizado 2020-02-27 · CVE-2017-1000020

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eCos versions 1 and other versions ECos Embedded Web Servers (affected versions not specified)

Description The issue is related to a web authentication bypass in eCos Embedded Web Servers used by multiple routers and home devices. When sending SYN Flood or FIN Flood packets, the web server fails to validate and handle the packets, resulting in authentication bypass. This allows an attacker to take control of the device remotely or locally. The estimated number of potentially affected devices is not specified.

Recommendations For eCos version 1 and other affected versions, consider disabling the web server functionality until a patch is available to prevent exploitation. Restrict access to the embedded web server to minimize the risk of exploitation. Avoid using the embedded web server for authentication purposes until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2017-01917

CVE-2017-1000020

Produtos afetados

Ecos

Ecos Embedded Web Servers

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-1000020 · Aviso do Fabricante
• http://ecos.sourceware.org/ecos/problemreport.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-01917 · Nota de Segurança
• https://t.me/cibsecurity/10125 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000020 · Nota de Segurança