PT-2018-5429 · Nec · Nec Aterm Wg2600Hp2

Kenney Lu · Publicado 2018-08-24 · Atualizado 2021-01-26 · CVE-2017-12575

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: NEC Aterm WG2600HP2 version 1.0.2

Description: An issue was discovered in the NEC Aterm WG2600HP2 router, which has a set of web service APIs for accessing and setting up the configuration. Some of these APIs do not require authentication, allowing an attacker to exploit this issue by sending a crafted HTTP request to retrieve sensitive information, such as DHCP clients, firmware version, and network status. For example, an attacker could use a command like curl -X http://[IP]/aterm httpif.cgi/negotiate -d "REQ ID=SUPPORT IF GET" to exploit this.

Recommendations: For NEC Aterm WG2600HP2 version 1.0.2, as a temporary workaround, consider restricting access to the aterm httpif.cgi API endpoint to minimize the risk of exploitation. Avoid using the REQ ID parameter with the value SUPPORT IF GET in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2017-12575

Produtos afetados

Nec Aterm Wg2600Hp2

Referências · 4

• http://jvn.jp/en/jp/JVN38248512/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-12575 · Nota de Segurança
• http://seclists.org/fulldisclosure/2018/Aug/26 · Nota
• https://osv.dev/vulnerability/CVE-2017-12575 · Aviso do Fabricante