PT-2019-9952 · Auerswald · Auerswald Comfort 1200 Ip Phone

Publicado 2019-05-29 · Atualizado 2020-08-24 · CVE-2018-19977

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Auerswald COMfort 1200 IP phone version 3.4.4.1-10589

Description The issue is related to a command injection due to missing input validation and escaping in the ftp upgrade configuration interface. This allows an authenticated remote attacker in the same network as the device to trigger OS commands, such as starting telnetd or opening a reverse shell, via a POST request to the web server.

Recommendations For Auerswald COMfort 1200 IP phone version 3.4.4.1-10589, consider restricting access to the ftp upgrade configuration interface until a patch is available. As a temporary workaround, limit the ability to send POST requests to the web server from unauthorized sources. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2018-19977

Produtos afetados

Auerswald Comfort 1200 Ip Phone

Referências · 4

• 🔥 https://sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Auerswald_COMfortel_1200_IP.pdf?_=1549376183 · Exploit
• https://auerswald.de/de/service/81-telefone/schnurgebundene-telefone/1568-comfortel-1200-ip.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-19977 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19977 · Nota de Segurança