PT-2019-19969 · Dasan · Dasan H660Rm

Krzysztof Burghardt · Publicado 2019-04-11 · Atualizado 2020-08-24 · CVE-2019-9974

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions DASAN H660RM GPON routers with firmware 1.03-0022

Description The issue concerns a lack of authorization check in the diag tool.cgi component, allowing remote attackers to send a GET request and execute a ping command. This can be used to enumerate LAN devices or potentially crash the router with a Denial of Service (DoS) attack.

Recommendations For DASAN H660RM GPON routers with firmware 1.03-0022, consider restricting access to the diag tool.cgi component until a patch is available. As a temporary workaround, limiting the exposure of the router to the internet or implementing network segmentation to reduce the attack surface can help mitigate the risk.

Exploit

Correção

Missing Authentication

Missing Authorization

Enumeração de Fraquezas

CWE-306

CWE-862

Identificadores relacionados

CVE-2019-9974

Produtos afetados

Dasan H660Rm

Referências · 5

• 🔥 https://blog.burghardt.pl/2019/03/diag_tool-cgi-on-dasan-h660rm-devices-with-firmware-1-03-0022-allows-spawning-ping-processes-without-any-authorization-leading-to-information-disclosure-and-dos-attacks · Exploit
• https://osv.dev/vulnerability/CVE-2019-9974 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-9974 · Nota de Segurança
• http://packetstormsecurity.com/files/152232/DASAN-H660RM-Information-Disclosure-Hardcoded-Key.html · Nota
• https://seclists.org/bugtraq/2019/Mar/41 · Nota