PT-2019-6331 · Inspur · Inspur Clusterengine

Publicado 2019-11-26 · Atualizado 2021-02-26 · CVE-2020-21224

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Inspur ClusterEngine version V4.0

Description A Remote Code Execution issue has been found, allowing a remote attacker to send a malicious login packet to the control server. The vulnerability is related to the injection or modification of arguments with the ' parameter, which can be exploited by sending specially crafted packets, enabling the attacker to execute arbitrary code.

Recommendations For Inspur ClusterEngine version V4.0, consider disabling the login functionality until a patch is available. Restrict access to the control server to minimize the risk of exploitation. Avoid using the vulnerable parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Argument Injection

Enumeração de Fraquezas

CWE-88

Identificadores relacionados

BDU:2023-02310

CVE-2020-21224

Produtos afetados

Inspur Clusterengine

Referências · 8

• 🔥 https://github.com/NS-Sp4ce/Inspur/tree/master/ClusterEngineV4.0%20Vul · Exploit
• 🔥❌ https://github.com/MzzdToT/CVE-2020-21224 · Exploit, Deleted
• https://bdu.fstec.ru/vul/2023-02310 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2020-21224 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2020-21224 · Aviso do Fabricante
• https://github.com/NS-Sp4ce/Inspur · Nota
• https://t.me/cibsecurity/23929 · Publicação no Telegram
• https://inspur.com/lcjtww/psirt/security-advisories/2485095/index.html · Nota