PT-2017-3366 · Sonix+1 · Sonix+1

Published 2017-09-01 · Updated 2018-01-12 · CVE-2017-17107

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zivif PR115-204-P-RS versions prior to a version with a fixed password for the root user

Description The issue is related to the use of hardcoded credentials, specifically a password cat1029 for the root user, which cannot be changed due to the SONIX operating system's setup. This allows a remote attacker to gain access to the device with root privileges using a Telnet connection.

Recommendations For Zivif PR115-204-P-RS, consider disabling Telnet access until a patch or a version with a changeable root password is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2018-00137

CVE-2017-17107

Affected Products

Sonix

Zivif Pr115-204-P-Rs

References · 7

• 🔥 http://seclists.org/fulldisclosure/2017/Dec/42 · Exploit
• 🔥 http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html · Exploit
• 🔥 https://twitter.com/ankit_anubhav/status/950485367215525888 · Exploit
• https://bdu.fstec.ru/vul/2018-00137 · Security Note
• https://osv.dev/vulnerability/CVE-2017-17107 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-17107 · Security Note
• https://twitter.com/silascutler/status/938052460328968192 · Note