PT-2017-15135 · Bae Systems · Bas920+3

Capitan Alfalo · Published 2017-12-29 · Updated 2019-10-03 · CVE-2017-17974

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BA SYSTEMS BAS Web versions on BAS920 devices with Firmware 01.01.00*, HTTPserv 00002, and Script 02.* BA SYSTEMS BAS Web versions on ISC2000 devices

Description The issue allows remote attackers to obtain sensitive information by making a request for "isc/get sid js.aspx" or "isc/get sid.aspx". This can lead to obtaining administrative access by using the credential information for the Supervisor/Administrator account.

Recommendations For BA SYSTEMS BAS Web on BAS920 devices with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*, restrict access to the "isc/get sid js.aspx" and "isc/get sid.aspx" endpoints to minimize the risk of exploitation. For BA SYSTEMS BAS Web on ISC2000 devices, avoid using the Supervisor/Administrator account until the issue is resolved. As a temporary workaround, consider disabling the HTTPserv and Script components on both BAS920 and ISC2000 devices until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2017-17974

Affected Products

Bas Web

Bas920

Httpserv

Isc2000

References · 4

• 🔥 http://misteralfa-hack.blogspot.cl/2017/12/ba-system-improper-access-control.html · Exploit
• https://osv.dev/vulnerability/CVE-2017-17974 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-17974 · Security Note
• ❌ https://github.com/ezelf/baCK_system · Note, Deleted