PT-2019-5517 · Openwrt · Openwrt

Claudio Bozzato · Published 2019-09-11 · Updated 2023-07-12 · CVE-2019-5102

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenWrt versions 15.05.1 through 18.06.4

Description The issue is related to errors in the certificate authentication procedure of the Ustream-SSL library in OpenWrt. This can be exploited by a remote attacker to perform a man-in-the-middle attack. When connecting to a remote server, the server's SSL certificate is checked, but no action is taken if the certificate is invalid. An attacker could exploit this behavior by providing any certificate, potentially leading to the theft of data sent by the client during the first request.

Recommendations For versions 15.05.1 and 18.06.4, consider disabling the Ustream-SSL library until a patch is available to prevent man-in-the-middle attacks. Restrict access to remote servers using the vulnerable Ustream-SSL library to minimize the risk of exploitation. Avoid using the vulnerable library for sensitive data transmission until the issue is resolved.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2020-03446

CVE-2019-5102

Affected Products

Openwrt

References · 5

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0893 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-5102 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5102 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03446 · Security Note
• https://openwrt.org/advisory/2019-11-05-3 · Note