PT-2019-13149 · Inteno · Inteno Eg200

Gerard Fuguet · Published 2019-09-16 · Updated 2022-03-31 · CVE-2019-13140

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Inteno EG200 EG200-WU7P1U ADAMO version 3.16.4-190226 1650

Description The issue is related to a JUCI ACL misconfiguration. This misconfiguration allows the user account to extract the 3DES key via JSON commands to ubus. The 3DES key is used for decrypting the provisioning file, which is provided by Adamo Telecom on a public URL via cleartext HTTP.

Recommendations For Inteno EG200 EG200-WU7P1U ADAMO version 3.16.4-190226 1650, as a temporary workaround, consider restricting access to the ubus JSON commands to prevent the extraction of the 3DES key. Additionally, avoid using cleartext HTTP for provisioning files. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2019-13140

Affected Products

Inteno Eg200

References · 6

• 🔥 https://exploit-db.com/exploits/47390 · Exploit
• 🔥 https://exploit-db.com/docs/47397 · Exploit
• 🔥 http://packetstormsecurity.com/files/154494/Inteno-IOPSYS-Gateway-3DES-Key-Extraction-Improper-Access.html · Exploit
• https://osv.dev/vulnerability/CVE-2019-13140 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13140 · Security Note
• https://twitter.com/GerardFuguet/status/1169298861782896642 · Note