PT-2017-2824 · Opendreambox · Opendreambox

Published 2017-09-04 · Updated 2017-09-12 · CVE-2017-14135

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions opendreambox version 2.0.0

Description The issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the "/script" URI. This is due to the lack of neutralization of special elements used in the OS command in the enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py script of the WebAdmin plugin.

Recommendations For opendreambox version 2.0.0, consider disabling access to the "/script" URI until a patch is available to prevent exploitation. Restrict the use of the command parameter in the Script.py script to minimize the risk of arbitrary OS command execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2017-02102

CVE-2017-14135

Affected Products

Opendreambox

References · 6

• 🔥 https://the-infosec.com/2017/07/05/from-shodan-to-rce-opendreambox-2-0-0-code-execution · Exploit
• 🔥 https://the-infosec.com/2017/05/12/from-shodan-to-rce-opendreambox-2-0-0-code-execution · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-14135 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14135 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02102 · Security Note
• https://security-database.com/detail.php?alert=CVE-2017-14135 · Note