PT-2018-2487 · Orange · Orange Livebox

Troy Mursch · Published 2018-12-23 · Updated 2019-10-03 · CVE-2018-20377

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Orange Livebox versions 00.96.320S

Description The issue is caused by an error in handling registration data in the get getnetworkconf.cgi script of the wireless router's firmware. This can allow a remote attacker to access protected information using the HTTP protocol. The vulnerability can be exploited to discover Wi-Fi credentials via the "/get getnetworkconf.cgi" API endpoint on port 8080, potentially leading to full control if the admin password is the same as the Wi-Fi password or has the default admin value.

Recommendations For Orange Livebox version 00.96.320S, consider restricting access to the "/get getnetworkconf.cgi" API endpoint on port 8080 to minimize the risk of exploitation. Additionally, ensure that the admin password is different from the Wi-Fi password and not set to the default admin value. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-255

Related Identifiers

BDU:2019-00774

CVE-2018-20377

Affected Products

Orange Livebox

References · 8

• 🔥 https://github.com/zadewg/LIVEBOX-0DAY · Exploit
• 🔥 https://badpackets.net/over-19000-orange-livebox-adsl-modems-are-leaking-their-wifi-credentials · Exploit
• 🔥 https://web.archive.org/web/20181223120225/https://badpackets.net/over-19000-orange-livebox-adsl-modems-are-leaking-their-wifi-credentials · Exploit
• https://osv.dev/vulnerability/CVE-2018-20377 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00774 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-20377 · Security Note
• https://news.ycombinator.com/item?id=18745533 · Note
• https://securitylab.ru/news/497178.php · Note