PT-2019-16600 · Wifi Soft · Wifi-Soft Unibox Controller

Sahil Dhar · Published 2019-03-18 · Updated 2021-09-13 · CVE-2019-3495

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wifi-soft UniBox controller versions 0.x through 2.x

Description An issue was discovered that allows for arbitrary file upload through the network/mesh/edit-nds.php endpoint, enabling an attacker to upload .php files and execute code on the server with root user privileges. The authentication for accessing this component can be bypassed by using hard-coded credentials.

Recommendations For Wifi-soft UniBox controller versions 0.x through 2.x, as a temporary workaround, consider disabling access to the network/mesh/edit-nds.php endpoint until a patch is available. Restrict the use of hard-coded credentials to minimize the risk of exploitation.

Exploit

Fix

Using Hardcoded Credentials

Unrestricted File Upload

Weakness Enumeration

CWE-798

CWE-434

Related Identifiers

CVE-2019-3495

Affected Products

Wifi-Soft Unibox Controller

References · 4

• 🔥 http://packetstormsecurity.com/files/151077/Wifi-soft-Unibox-2.x-Remote-Command-Code-Injection.html · Exploit
• 🔥 https://sahildhar.github.io/blogpost/Multiple-RCE-Vulnerabilties-in-Unibox-Controller-0.x-3.x · Exploit
• 🔥 http://seclists.org/fulldisclosure/2019/Jan/23 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-3495 · Security Note