PT-2017-6564 · Airlink101 · Airlink101 Skyipcam1620W

Joaquin Rodriguez Varela + 1 · Publicado 2017-07-24 · Atualizado 2018-10-09 · CVE-2015-2280

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera version FW AIC1620W 1.1.0-12 20120709 r1192.pck

Description The issue allows remote authenticated users to execute arbitrary OS commands. This is achieved by injecting shell metacharacters in the mac parameter of the snwrite.cgi endpoint.

Recommendations For AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera version FW AIC1620W 1.1.0-12 20120709 r1192.pck, consider restricting access to the snwrite.cgi endpoint until a patch is available. As a temporary workaround, avoid using the mac parameter in the snwrite.cgi endpoint to minimize the risk of exploitation.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2015-2280

Produtos afetados

Airlink101 Skyipcam1620W

Referências · 7

• 🔥 http://seclists.org/fulldisclosure/2015/Jul/40 · Exploit
• 🔥 https://exploit-db.com/exploits/37527 · Exploit
• 🔥 https://coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection · Exploit
• 🔥 http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2280 · Nota de Segurança
• http://securityfocus.com/bid/75597 · Nota
• http://securityfocus.com/archive/1/535963/100/0/threaded · Nota