PT-2017-2824 · Opendreambox · Opendreambox

Publicado 2017-09-04 · Atualizado 2017-09-12 · CVE-2017-14135

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions opendreambox version 2.0.0

Description The issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the "/script" URI. This is due to the lack of neutralization of special elements used in the OS command in the enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py script of the WebAdmin plugin.

Recommendations For opendreambox version 2.0.0, consider disabling access to the "/script" URI until a patch is available to prevent exploitation. Restrict the use of the command parameter in the Script.py script to minimize the risk of arbitrary OS command execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

BDU:2017-02102

CVE-2017-14135

Produtos afetados

Opendreambox

Referências · 6

• 🔥 https://the-infosec.com/2017/07/05/from-shodan-to-rce-opendreambox-2-0-0-code-execution · Exploit
• 🔥 https://the-infosec.com/2017/05/12/from-shodan-to-rce-opendreambox-2-0-0-code-execution · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-14135 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-14135 · Aviso do Fabricante
• https://security-database.com/detail.php?alert=CVE-2017-14135 · Nota
• https://bdu.fstec.ru/vul/2017-02102 · Nota de Segurança