PT-2023-14413 · Linksys · Linksys Wumc710 Wireless-Ac Universal Media Connector

Jessie Chick · Publicado 2023-01-09 · Atualizado 2023-01-13 · CVE-2022-43971

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linksys WUMC710 Wireless-AC Universal Media Connector version 1.0.02 (build3) and earlier

Description An arbitrary code execution issue exists due to the do setNTP function within the httpd binary using unvalidated user input in the construction of a system command. An authenticated attacker with administrator privileges can exploit this over the network via a malicious GET or POST request to "/setNTP.cgi" to execute arbitrary commands on the underlying Linux operating system as root.

Recommendations For Linksys WUMC710 Wireless-AC Universal Media Connector version 1.0.02 (build3) and earlier, as a temporary workaround, consider disabling the do setNTP function until a patch is available. Restrict access to the "/setNTP.cgi" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2022-43971

Produtos afetados

Linksys Wumc710 Wireless-Ac Universal Media Connector

Referências · 6

• 🔥 https://youtu.be/TeWAmZaKQ_w · Exploit
• 🔥 https://youtu.be/73-1lhvJPNg · Exploit
• 🔥 https://youtu.be/RfWVYCUBNZ0 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-43971 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-43971 · Aviso do Fabricante
• https://t.me/cibsecurity/56185 · Publicação no Telegram