PT-2018-1144 · Mitel · Mitel Connect Onsite+1

Jared Mclaren · Publicado 2018-03-06 · Atualizado 2019-04-26 · CVE-2018-5782

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mitel Connect ONSITE versions R1711-PREM and earlier Mitel ST 14.2 release GA28 and earlier

Description A vulnerability in the conferencing component could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the "vsethost.php" page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application. The issue is related to incorrect code generation management. An attacker could exploit this vulnerability by sending specially crafted requests to the vsethost.php script, allowing them to inject and execute arbitrary PHP code.

Recommendations For Mitel Connect ONSITE versions R1711-PREM and earlier, consider disabling access to the vsethost.php page until a patch is available. For Mitel ST 14.2 release GA28 and earlier, restrict access to the conferencing component to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2018-00577

CVE-2018-5782

Produtos afetados

Mitel Connect Onsite

Mitel St

Referências · 8

• 🔥 https://exploit-db.com/exploits/46174 · Exploit
• https://github.com/twosevenzero/shoretel-mitel-rce · Nota
• https://bdu.fstec.ru/vul/2018-00577 · Nota de Segurança
• https://mitel.com/mitel-product-security-advisory-18-0004 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-5782 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-5782 · Aviso do Fabricante
• https://mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004 · Aviso do Fabricante
• https://mitel.com/sites/default/files/Security-Bulletin-18-0004-001v1.0-2018-03-06.pdf · Nota