PT-2019-8653 · Vera · Veraedge+1

Mandar Satam · Published 2019-06-17 · Updated 2019-06-20 · CVE-2017-9384

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481

Description An issue was discovered in the device firmware file, specifically in the relay.sh script, which allows the device to create relay ports and connect to Vera servers. The script retrieves a parameter called remote host, which is not sanitized correctly and is passed to another script using eval. This allows an attacker to escape from the executed command and execute any commands of their choice. The device provides a web user interface that allows a user to manage the device, and this functionality is primarily used for communication between the device and Vera servers.

Recommendations For Vera VeraEdge version 1.7.19, consider disabling the relay.sh script until a patch is available to prevent exploitation. For Vera Veralite version 1.7.481, restrict access to the relay.sh script to minimize the risk of exploitation. Avoid using the remote host parameter in the affected script until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2017-9384

Affected Products

Veraedge

Veralite

References · 6

• 🔥 https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-9384 · Security Note
• https://osv.dev/vulnerability/CVE-2017-9384 · Vendor Advisory
• https://seclists.org/bugtraq/2019/Jun/8 · Note
• http://packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html · Note
• https://t.me/cibsecurity/4951 · Telegram Post