PT-2019-13355 · Busybox+4 · Busybox+12

Benjamin K.M · Publicado 2019-09-11 · Atualizado 2023-09-05 · CVE-2019-13473

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TELESTAR Bobs Rock Radio version (affected versions not specified) Dabman D10 version (affected versions not specified) Dabman i30 Stereo version (affected versions not specified) Imperial i110 version (affected versions not specified) Imperial i150 version (affected versions not specified) Imperial i200 version (affected versions not specified) Imperial i200-cd version (affected versions not specified) Imperial i400 version (affected versions not specified) Imperial i450 version (affected versions not specified) Imperial i500-bt version (affected versions not specified) Imperial i600 TN81HH96-g102h-g102 version (affected versions not specified)

Description The issue is related to an undocumented TELNET service within the BusyBox subsystem, which can lead to root access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

ALT-PU-2019-2687

ALT-PU-2019-2690

CVE-2019-13473

Produtos afetados

Alt Linux

Busybox

Dabman D10

Dabman I30 Stereo

Imperial I110

Imperial I150

Imperial I200

Imperial I200-Cd

Imperial I400

Imperial I450

Imperial I500-Bt

Imperial I600 Tn81Hh96-G102H-G102

Telestar Bobs Rock Radio

Referências · 19

• 🔥 http://packetstormsecurity.com/files/154416/Dabman-And-Imperial-Web-Radio-Devices-Undocumented-Telnet-Backdoor.html · Exploit
• 🔥 https://vulnerability-lab.com/get_content.php?id=2183 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13485 · Nota de Segurança
• http://seclists.org/fulldisclosure/2023/Sep/1 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13451 · Nota de Segurança
• https://lists.xymon.com/archive/2019-July/046570.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13452 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13455 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2019-13473 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13474 · Nota de Segurança
• http://packetstormsecurity.com/files/174503/Internet-Radio-auna-IR-160-SE-UIProto-DoS-XSS-Missing-Authentication.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13274 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13486 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13484 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-13473 · Nota de Segurança