PT-2019-12659 · Sangoma · Sangoma Session Border Controller

Publicado 2019-10-18 · Atualizado 2020-08-24 · CVE-2019-12147

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sangoma Session Border Controller (SBC) version 2.3.23-119 GA

Description The issue allows for Argument Injection via special characters in the username field, enabling a remote unauthenticated user to create a local system user with sudo privileges. This can lead to complete compromise of the device, as the created user can login to the system via the web interface or SSH. The vulnerable components include /var/webconfig/gui/Webconfig.inc.php and /usr/local/sng/bin/sng-user-mgmt.

Recommendations For Sangoma Session Border Controller (SBC) version 2.3.23-119 GA, consider restricting access to the web interface until a patch is available, and avoid using special characters in the username field to minimize the risk of exploitation. As a temporary workaround, restrict the creation of local system users with sudo privileges to prevent potential compromise.

Exploit

Correção

Argument Injection

Enumeração de Fraquezas

CWE-88

Identificadores relacionados

CVE-2019-12147

Produtos afetados

Sangoma Session Border Controller

Referências · 6

• 🔥 http://packetstormsecurity.com/files/154914/Sangoma-SBC-2.3.23-119-GA-Unauthenticated-User-Creation.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2019/Oct/40 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-12147 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-12147 · Aviso do Fabricante
• https://blog.appsecco.com · Nota
• https://t.me/defcon_news/27718 · Publicação no Telegram