PT-2017-18700 · Netbiter · Netbiter Fgw200

Published 2017-06-16 · Updated 2017-07-05 · CVE-2017-9097

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Anti-Web through 3.8.7 NetBiter FGW200 devices through 3.21.2 WS100 devices through 3.30.5 EC150 devices through 1.40.0 WS200 devices through 3.30.4 EC250 devices through 1.40.0

Description The issue allows a remote attacker to read or modify files through a path traversal technique. This can be demonstrated by reading the password file or using the template parameter to /cgi-bin/write.cgi to write to an arbitrary file.

Recommendations For Anti-Web through 3.8.7, update to a version later than 3.8.7 to resolve the issue. For NetBiter FGW200 devices through 3.21.2, update to a version later than 3.21.2. For WS100 devices through 3.30.5, update to a version later than 3.30.5. For EC150 devices through 1.40.0, update to a version later than 1.40.0. For WS200 devices through 3.30.4, update to a version later than 3.30.4. For EC250 devices through 1.40.0, update to a version later than 1.40.0. As a temporary workaround, consider restricting access to the /cgi-bin/write.cgi endpoint to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2017-9097

Affected Products

Netbiter Fgw200

References · 6

• 🔥 https://github.com/MDudek-ICS/AntiWeb_testing-Suite · Exploit
• https://osv.dev/vulnerability/CVE-2017-9097 · Vendor Advisory
• https://netbiter.com/docs/default-source/netbiter-english/software/hms-security-advisory-2017-05-24-001-ws100-ws200-ec150-ec250.zip · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9097 · Security Note
• http://misteralfa-hack.blogspot.cl/2017/05/apps-industrial-ot-over-server-anti-web.html · Note
• ❌ https://github.com/ezelf/industrial_Tools/tree/master/scadas_server_antiweb/LFI · Note, Deleted