PT-2016-3222 · Dnalims · Dnalims

H00Die + 2 · Published 2016-11-06 · Updated 2019-10-03 · CVE-2017-6526

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dnaLIMS version 4-2015s13

Description The issue concerns an improperly protected administrative web shell, allowing unauthenticated command execution. This can be exploited through cgi-bin/dna/sysAdmin.cgi using specially crafted POST requests, enabling a remote attacker to execute arbitrary commands. The vulnerability is related to the lack of input data sanitization measures in the administrative web shell of the dnaLIMS software.

Recommendations For dnaLIMS version 4-2015s13, consider disabling access to the cgi-bin/dna/sysAdmin.cgi endpoint until a patch is available to prevent exploitation. Restricting access to this administrative web shell can help minimize the risk of command execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Improper Authentication

Weakness Enumeration

CWE-77

CWE-287

Related Identifiers

BDU:2017-02590

CVE-2017-6526

Affected Products

Dnalims

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dnalims_admin_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/41578 · Exploit
• 🔥 https://shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-6526 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6526 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02590 · Security Note
• http://securityfocus.com/bid/96823 · Note
• https://dnatools.mskcc.org · Note