PT-2018-15035 · Moxa · Nport W2X50A

Maksim Khazov · Publicado 2018-12-06 · Atualizado 2019-01-30 · CVE-2018-19660

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa NPort W2x50A products with firmware prior to 2.2 Build 18082311

Description An exploitable authenticated command-injection issue exists in the web server functionality. A specially crafted HTTP POST request to "/goform/webSettingProfileSecurity" can result in running OS commands as the root user.

Recommendations For Moxa NPort W2x50A products with firmware prior to 2.2 Build 18082311, update the firmware to version 2.2 Build 18082311 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/goform/webSettingProfileSecurity" endpoint to minimize the risk of exploitation.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2018-19660

Produtos afetados

Nport W2X50A

Referências · 4

• 🔥 http://seclists.org/fulldisclosure/2018/Nov/64 · Exploit
• 🔥 http://packetstormsecurity.com/files/150535/Moxa-NPort-W2x50A-2.1-OS-Command-Injection.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19660 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19660 · Aviso do Fabricante