PT-2019-8652 · Vera · Veraedge+1

Mandar Satam · Publicado 2019-06-17 · Atualizado 2019-06-20 · CVE-2017-9383

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Veralite version 1.7.481

Description An issue was discovered on Vera devices, where the UPnP services available on port 3480 and accessible via port 80 using the url "/port 3480" provide a "wget" service action. This action retrieves the URL parameter from the query string and passes it to an internal function that uses the curl module to retrieve the contents of the website.

Recommendations For Vera VeraEdge version 1.7.19, consider disabling the "wget" service action to prevent exploitation until a patch is available. For Veralite version 1.7.481, restrict access to the "/port 3480" url to minimize the risk of exploitation. As a temporary workaround, avoid using the URL parameter in the affected UPnP service until the issue is resolved.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-9383

Produtos afetados

Veraedge

Veralite

Referências · 6

• 🔥 https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf · Exploit
• https://seclists.org/bugtraq/2019/Jun/8 · Nota
• http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html · Nota
• https://osv.dev/vulnerability/CVE-2017-9383 · Aviso do Fabricante
• https://t.me/cibsecurity/4963 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2017-9383 · Nota de Segurança