PT-2018-13635 · Swisscom · Swisscom Internet-Box+1
Published
2018-12-17
·
Updated
2020-08-24
·
CVE-2018-16596
CVSS v3.1
7.5
High
| Vector | AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Swisscom Internet-Box (2, Standard, and Plus) versions prior to v09.04.00
Swisscom Internet-Box light versions prior to v08.05.02
Description
A stack-based buffer overflow in the LAN UPnP service allows remote code execution. No authentication is required to exploit this issue. An attacker can send a UDP packet to port 1900 to execute code on a remote device, but this is only possible if the attacker is inside the LAN. The success rate is not 100% due to ASLR, and instead, it leads to a Denial of Service (DoS) of the UPnP service. The remaining functionality of the Internet Box is not affected.
Recommendations
For Swisscom Internet-Box (2, Standard, and Plus) versions prior to v09.04.00, update to version v09.04.00 or later to resolve the issue.
For Swisscom Internet-Box light versions prior to v08.05.02, update to version v08.05.02 or later to resolve the issue.
As a temporary workaround, consider restricting access to UDP port 1900 to minimize the risk of exploitation.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Swisscom Internet-Box
Swisscom Internet Box Light