PT-2019-18570 · Raisecom · Raisecom Iscom Ht803G-W+2

Published 2019-03-17 · Updated 2023-02-01 · CVE-2019-7385

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with firmware version ISCOMHT803G-U 2.0.0 140521 R4.1.47.002 or below

Description An authenticated shell command injection issue has been discovered. The values of the newpass and confpass parameters in the /bin/WebMGR endpoint are used in a system call in the firmware. Because there is no user input validation, this leads to authenticated code execution on the device.

Recommendations For Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with firmware version ISCOMHT803G-U 2.0.0 140521 R4.1.47.002 or below, consider updating to a newer firmware version to resolve the issue. As a temporary workaround, restrict access to the /bin/WebMGR endpoint to minimize the risk of exploitation. Avoid using the newpass and confpass parameters in the affected endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2019-7385

Affected Products

Raisecom Iscom Ht803G Gpon

Raisecom Iscom Ht803G-1Ge

Raisecom Iscom Ht803G-W

References · 10

• 🔥 http://breakthesec.com/search/label/0day · Exploit
• 🔥 http://packetstormsecurity.com/files/151650/Raisecom-Technology-GPON-ONU-HT803G-07-Command-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/46489 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2019/Feb/34 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-7385 · Security Note
• https://osv.dev/vulnerability/CVE-2019-7385 · Vendor Advisory
• https://s3curityb3ast.github.io/KSA-Dev-006.md · Note
• http://breakthesec.com · Note
• http://securityfocus.com/bid/107030 · Note
• https://s3curityb3ast.github.io · Note