PT-2020-12813 · Spirent · Spirent Testcenter+1

A05110511T + 1 · Published 2020-08-13 · Updated 2021-07-21 · CVE-2020-11733

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Spirent TestCenter and Avalanche appliance admin interface firmware versions <= 5.08

Description An issue allows an attacker with access to an SSH restricted shell to achieve root access via shell metacharacters. This enables the attacker to read sensitive files, such as appliance admin configuration source code. The SSH restricted shell is accessible with default credentials.

Recommendations For versions <= 5.08, update the firmware to a version that includes a fix for this issue, ensuring that default credentials are changed to prevent unauthorized access to the SSH restricted shell. As a temporary workaround, consider restricting access to the SSH restricted shell until a patch is available.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-11733

Affected Products

Avalanche

Spirent Testcenter

References · 4

• 🔥 https://github.com/a05110511t/CVE/blob/master/CVE-2020-11733.md · Exploit
• https://osv.dev/vulnerability/CVE-2020-11733 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11733 · Security Note
• https://gist.github.com/a05110511t/65d07bc776d7c11b4ccf112a09cca4ab · Note