PT-2017-17335 · Solarwinds · Solarwinds Ftp Voyager

Hyp3Rlinx + 1 · Published 2017-03-20 · Updated 2017-03-23 · CVE-2017-6803

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SolarWinds FTP Voyager version 16.2.0

Description The issue affects the web interface in the Scheduler of SolarWinds FTP Voyager, allowing remote attackers to hijack user authentication for specific requests. This can lead to actions such as changing the admin password, terminating the scheduler, or possibly executing arbitrary commands. The attack is facilitated through crafted requests, for example, to the "Admin/XML/Result.xml" endpoint.

Recommendations For SolarWinds FTP Voyager version 16.2.0, as a temporary workaround, consider restricting access to the Scheduler's web interface and avoid using the Admin/XML/Result.xml endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2017-6803

Affected Products

Solarwinds Ftp Voyager

References · 6

• 🔥 http://packetstormsecurity.com/files/141567/FTP-Voyager-Scheduler-16.2.0-CSRF-Denial-Of-Service.html · Exploit
• 🔥 http://hyp3rlinx.altervista.org/advisories/FTP-VOYAGER-SCHEDULER-CSRF-REMOTE-CMD-EXECUTION.txt · Exploit
• 🔥 https://exploit-db.com/exploits/41574 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-6803 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6803 · Vendor Advisory
• http://securityfocus.com/bid/96814 · Note