PT-2018-1148 · Dewesoft · Dewesoft X3 Sp1

Hyp3Rlinx + 1 · Published 2018-02-09 · Updated 2018-04-12 · CVE-2018-7756

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DEWESoft X3 SP1 (64-bit)

Description The issue is related to the RunExeFile.exe in the installer, which does not require authentication for sessions on TCP port 1999. This allows remote attackers to execute arbitrary code or access internal commands. For example, a RUN command can launch a .EXE file from an arbitrary external URL, or a "SETFIREWALL Off" command can be executed.

Recommendations For DEWESoft X3 SP1 (64-bit), consider restricting access to TCP port 1999 until a patch is available. As a temporary workaround, avoid using the RunExeFile.exe feature to execute external files or commands until the issue is resolved. Restrict access to internal commands to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2018-00585

CVE-2018-7756

Affected Products

Dewesoft X3 Sp1

References · 5

• 🔥 http://hyp3rlinx.altervista.org/advisories/DEWESOFT-X3-REMOTE-INTERNAL-COMMAND-ACCESS.txt · Exploit
• 🔥 https://exploit-db.com/exploits/44275 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-7756 · Security Note
• https://bdu.fstec.ru/vul/2018-00585 · Security Note
• https://osv.dev/vulnerability/CVE-2018-7756 · Vendor Advisory