PT-2018-10225 · Dongguan Diqee · Diqee360
George Zaytsev
+1
·
Published
2018-07-05
·
Updated
2019-10-03
·
CVE-2018-10987
CVSS v2.0
8.5
High
| Vector | AV:N/AC:M/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Dongguan Diqee Diqee360 devices (affected versions not specified)
Description
The issue is an authenticated remote code execution problem. An attacker can send a specially crafted UDP packet to execute commands as root. The vulnerability is in the
REQUEST SET WIFIPASSWD function, which is a UDP command 153. By sending a crafted UDP packet, an attacker can run the /mnt/skyeye/mode switch.sh script with control over the %s variable. In some cases, authentication can be achieved using the default password 888888 for the admin account.Recommendations
As a temporary workaround, consider disabling the
REQUEST SET WIFIPASSWD function until a patch is available.
Restrict access to the UDP command 153 to minimize the risk of exploitation.
Change the default password 888888 for the admin account to a stronger password to prevent unauthorized access.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Diqee360