PT-2017-13981 · Airtame · Airtame

Utku Sen · Published 2017-10-15 · Updated 2017-11-07 · CVE-2017-15304

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Airtame HDMI dongle versions prior to 3.0

Description The issue allows an attacker to set their own session ID via a "Cookie: PHPSESSID=" header in the /bin/login.php file of the Web Panel. This can be used to achieve persistent access to the admin panel even after an admin password change.

Recommendations For versions prior to 3.0, update the firmware to version 3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the /bin/login.php file to minimize the risk of exploitation. Avoid using the PHPSESSID variable in the Cookie header until the issue is resolved.

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2017-15304

Affected Products

Airtame

References · 3

• https://osv.dev/vulnerability/CVE-2017-15304 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-15304 · Security Note
• https://utkusen.com/blog/multiple-vulnerabilities-on-airtame-device-before-version-3.html · Note