PT-2019-18569 · Raisecom · Raisecom Iscom Ht803G-W+2

Kaustubh · Published 2019-03-17 · Updated 2023-02-01 · CVE-2019-7384

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with firmware version ISCOMHT803G-U 2.0.0 140521 R4.1.47.002 or below

Description An authenticated shell command injection issue has been discovered. The fmgpon loid parameter is used in a system call inside the boa binary without user input validation, leading to authenticated code execution on the device.

Recommendations For Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with firmware version ISCOMHT803G-U 2.0.0 140521 R4.1.47.002 or below, consider restricting access to the boa binary or implementing input validation for the fmgpon loid parameter as a temporary mitigation measure until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2019-7384

Affected Products

Raisecom Iscom Ht803G Gpon

Raisecom Iscom Ht803G-1Ge

Raisecom Iscom Ht803G-W

References · 7

• 🔥 http://packetstormsecurity.com/files/151649/Raisecom-Technology-GPON-ONU-HT803G-07-Command-Injection.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2019/Feb/33 · Exploit
• https://osv.dev/vulnerability/CVE-2019-7384 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7384 · Security Note
• https://breakthesec.com/2019/02/cve-2019-7384-authenticated-remote-code.html · Note
• https://s3curityb3ast.github.io/KSA-Dev-005.md · Note
• http://securityfocus.com/bid/107033 · Note