PT-2018-6561 · Ucopia · Ucopia Wireless Appliance

Publicado 2018-03-22 · Atualizado 2018-04-18 · CVE-2017-17743

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: UCOPIA Wireless Appliance devices versions prior to 4.4.20 UCOPIA Wireless Appliance devices versions 5.0.x prior to 5.0.19 UCOPIA Wireless Appliance devices versions 5.1.x prior to 5.1.11

Description: The issue is related to improper input sanitization within the restricted administration shell, allowing authenticated remote attackers to escape the shell and escalate their privileges. This can be achieved by uploading a .bashrc file containing the /bin/sh string. In some cases, authentication can be obtained using the default password bhu85tgb for the admin account.

Recommendations: For versions prior to 4.4.20, update to version 4.4.20 or later. For versions 5.0.x prior to 5.0.19, update to version 5.0.19 or later. For versions 5.1.x prior to 5.1.11, update to version 5.1.11 or later. As a temporary workaround, consider restricting access to the administration shell and changing the default admin password to prevent unauthorized access.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-17743

Produtos afetados

Ucopia Wireless Appliance

Referências · 3

• 🔥 https://securite.intrinsec.com/2018/03/19/cve-2017-17743-ucopia-shell-escape · Exploit
• https://osv.dev/vulnerability/CVE-2017-17743 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-17743 · Nota de Segurança