PT-2019-12937 · Enttec · Enttec E-Streamer Mk2+3

Published 2019-06-07 · Updated 2019-06-10 · CVE-2019-12776

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ENTTEC Datagate MK2 version 70044 update 05032019-482 ENTTEC Storm 24 version 70044 update 05032019-482 ENTTEC Pixelator version 70044 update 05032019-482 ENTTEC E-Streamer MK2 version 70044 update 05032019-482

Description An issue was discovered in the ENTTEC devices, which include a hard-coded SSH backdoor for remote SSH and SCP access as the root user. This backdoor is enabled by a command in the relocate and relocate revB scripts, which copies the hardcoded key to the root user's authorized keys file. As a result, anyone with the associated private key can gain remote root access to all affected products.

Recommendations For ENTTEC Datagate MK2 version 70044 update 05032019-482, consider disabling the SSH access until a patch is available. For ENTTEC Storm 24 version 70044 update 05032019-482, restrict access to the relocate and relocate revB scripts to minimize the risk of exploitation. For ENTTEC Pixelator version 70044 update 05032019-482, remove the hardcoded key from the root user's authorized keys file as a temporary workaround. For ENTTEC E-Streamer MK2 version 70044 update 05032019-482, avoid using the SSH and SCP access until the issue is resolved.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2019-12776

Affected Products

Enttec Datagate Mk2

Enttec E-Streamer Mk2

Enttec Pixelator

Enttec Storm 24

References · 3

• 🔥 https://mogozobo.com/?p=3476 · Exploit
• https://osv.dev/vulnerability/CVE-2019-12776 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12776 · Security Note