PT-2019-9952 · Auerswald · Auerswald Comfort 1200 Ip Phone

Published 2019-05-29 · Updated 2020-08-24 · CVE-2018-19977

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Auerswald COMfort 1200 IP phone version 3.4.4.1-10589

Description The issue is related to a command injection due to missing input validation and escaping in the ftp upgrade configuration interface. This allows an authenticated remote attacker in the same network as the device to trigger OS commands, such as starting telnetd or opening a reverse shell, via a POST request to the web server.

Recommendations For Auerswald COMfort 1200 IP phone version 3.4.4.1-10589, consider restricting access to the ftp upgrade configuration interface until a patch is available. As a temporary workaround, limit the ability to send POST requests to the web server from unauthorized sources. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2018-19977

Affected Products

Auerswald Comfort 1200 Ip Phone

References · 4

• 🔥 https://sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Auerswald_COMfortel_1200_IP.pdf?_=1549376183 · Exploit
• https://auerswald.de/de/service/81-telefone/schnurgebundene-telefone/1568-comfortel-1200-ip.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-19977 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19977 · Security Note