PT-2017-18718 · Mimosa · Mimosa Client Radios

Published 2017-05-21 · Updated 2019-10-03 · CVE-2017-9136

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mimosa Client Radios versions prior to 2.2.3

Description An issue in the device's web interface allows an attacker to download files from the device as the root user by using an unsanitized GET parameter. This can be used to view unsalted, MD5-hashed administrator passwords, which can then be cracked to give the attacker full admin access to the device's web interface. The attacker can also view the plaintext pre-shared key (PSK) for encrypted wireless connections or the device's serial number, allowing for a factory reset.

Recommendations For versions prior to 2.2.3, update to version 2.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the device's web interface to minimize the risk of exploitation. Avoid using the vulnerable web interface until the issue is resolved.

Fix

Insufficiently Protected Credentials

Incorrect Permission

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-522

CWE-732

CWE-327

Related Identifiers

CVE-2017-9136

Affected Products

Mimosa Client Radios

References · 3

• https://osv.dev/vulnerability/CVE-2017-9136 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9136 · Security Note
• http://blog.iancaling.com/post/160596244178 · Note