PT-2019-9113 · Bubbleupnp · Bubbleupnp

Published 2019-06-19 · Updated 2019-06-21 · CVE-2018-15506

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BubbleUPnP version 0.9 update 30

Description The XML parsing engine for SSDP/UPnP functionality in the affected software is vulnerable to an XML External Entity Processing (XXE) attack. This allows remote, unauthenticated attackers to access arbitrary files from the filesystem with the same permission as the user account running the software. Additionally, attackers can initiate SMB connections to capture a NetNTLM challenge/response and crack the cleartext password, or relay a NetNTLM challenge/response to achieve Remote Command Execution in Windows domains.

Recommendations For BubbleUPnP version 0.9 update 30, consider disabling the XML parsing engine for SSDP/UPnP functionality until a patch is available. Restrict access to sensitive files and directories to minimize the risk of exploitation. Avoid using the software in environments where Remote Command Execution could have significant consequences. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2018-15506

Affected Products

Bubbleupnp

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-15506 · Security Note
• https://bubblesoftapps.com/bubbleupnpserver2/docs/changelog.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-15506 · Vendor Advisory