PT-2025-9505 · Cubro · Cubro Exa48200

Tim Wörner · Publicado 2025-03-03 · Atualizado 2025-03-07 · CVE-2024-55570

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cubro EXA48200 network packet broker versions prior to V5.0R14.5P4-V3.3R1

Description The issue concerns incorrect access control in the Cubro EXA48200 network packet broker. It allows remote authenticated users to increase their privileges by sending a single HTTP PUT request to the "/api/user/users" endpoint in the web GUI with the rolename set to Administrator.

Recommendations For versions prior to V5.0R14.5P4-V3.3R1, update to V5.0R14.5P4-V3.3R1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/api/user/users" endpoint to prevent unauthorized privilege escalation.

Correção

LPE

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-266

Identificadores relacionados

CVE-2024-55570

Produtos afetados

Cubro Exa48200

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-55570 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1896635259657056392 · Publicação no Twitter
• https://herolab.usd.de/security-advisories/usd-2024-0014 · Nota
• https://herolab.usd.de/security-advisories · Nota
• https://twitter.com/CVEnew/status/1897912350159909341 · Publicação no Twitter