PT-2019-8653 · Vera · Veraedge+1

Mandar Satam · Publicado 2019-06-17 · Atualizado 2019-06-20 · CVE-2017-9384

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481

Description An issue was discovered in the device firmware file, specifically in the relay.sh script, which allows the device to create relay ports and connect to Vera servers. The script retrieves a parameter called remote host, which is not sanitized correctly and is passed to another script using eval. This allows an attacker to escape from the executed command and execute any commands of their choice. The device provides a web user interface that allows a user to manage the device, and this functionality is primarily used for communication between the device and Vera servers.

Recommendations For Vera VeraEdge version 1.7.19, consider disabling the relay.sh script until a patch is available to prevent exploitation. For Vera Veralite version 1.7.481, restrict access to the relay.sh script to minimize the risk of exploitation. Avoid using the remote host parameter in the affected script until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2017-9384

Produtos afetados

Veraedge

Veralite

Referências · 6

• 🔥 https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-9384 · Nota de Segurança
• https://seclists.org/bugtraq/2019/Jun/8 · Nota
• http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html · Nota
• https://osv.dev/vulnerability/CVE-2017-9384 · Aviso do Fabricante
• https://t.me/cibsecurity/4951 · Publicação no Telegram