PT-2018-9949 · Ee · Ee 4Gee Hh70Vb-2Be8Gb3

James Hemmings · Publicado 2018-10-30 · Atualizado 2019-01-30 · CVE-2018-10532

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: EE 4GEE HH70VB-2BE8GB3 HH70 E1 02.00 19

Description: An issue was discovered where hardcoded root SSH credentials are stored within the core app binary, which is used by the EE router for networking services. The default password is oelinux123. An attacker with knowledge of this password could login to the router via SSH as the root user, potentially leading to the loss of confidentiality, integrity, and availability of the system. This could also allow for the bypass of the "AP Isolation" mode and modification of settings for multiple Wireless networks.

Recommendations: For EE 4GEE HH70VB-2BE8GB3 HH70 E1 02.00 19, consider changing the default SSH credentials to prevent unauthorized access. As a temporary workaround, restrict SSH access to the router until a patch is available.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2018-10532

Produtos afetados

Ee 4Gee Hh70Vb-2Be8Gb3

Referências · 4

• 🔥 https://blog.jameshemmings.co.uk/2018/10/24/4gee-hh70-router-vulnerability-disclosure · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-10532 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-10532 · Aviso do Fabricante
• https://theregister.co.uk/2018/10/26/ee_4gee_hh70_ssh_backdoor · Nota