PT-2019-9113 · Bubbleupnp · Bubbleupnp

Publicado 2019-06-19 · Atualizado 2019-06-21 · CVE-2018-15506

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BubbleUPnP version 0.9 update 30

Description The XML parsing engine for SSDP/UPnP functionality in the affected software is vulnerable to an XML External Entity Processing (XXE) attack. This allows remote, unauthenticated attackers to access arbitrary files from the filesystem with the same permission as the user account running the software. Additionally, attackers can initiate SMB connections to capture a NetNTLM challenge/response and crack the cleartext password, or relay a NetNTLM challenge/response to achieve Remote Command Execution in Windows domains.

Recommendations For BubbleUPnP version 0.9 update 30, consider disabling the XML parsing engine for SSDP/UPnP functionality until a patch is available. Restrict access to sensitive files and directories to minimize the risk of exploitation. Avoid using the software in environments where Remote Command Execution could have significant consequences. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2018-15506

Produtos afetados

Bubbleupnp

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-15506 · Nota de Segurança
• https://bubblesoftapps.com/bubbleupnpserver2/docs/changelog.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-15506 · Aviso do Fabricante