PT-2020-14458 · Inneo · Inneo Startup Tools

Dr. Benjamin Heß + 1 · Published 2020-07-23 · Updated 2020-07-28 · CVE-2020-15492

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions INNEO Startup TOOLS versions 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804

Description An issue in the sut srv.exe web application allows user input to be included into a filesystem access without validation, potentially enabling an unauthenticated attacker to read files on the server via Directory Traversal. This could have unspecified other impact.

Recommendations For versions 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804, consider restricting access to the sut srv.exe web application served on TCP port 85 until a fix is available. As a temporary workaround, restrict filesystem access to prevent unauthorized file reading.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-15492

Affected Products

Inneo Startup Tools

References · 8

• 🔥 http://packetstormsecurity.com/files/158556/INNEO-Startup-TOOLS-2018-M040-13.0.70.3804-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/48693 · Exploit
• 🔥 https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-028.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-15492 · Security Note
• https://inneo.de/files/content/Produktentwicklung/Tools-und-Erweiterungen/Startup-TOOLS/INNEO-SA-SUT-2020-01.pdf · Vendor Advisory
• https://inneo.co.uk/en/product-development/inneo-in-house-products/startup-tools.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15492 · Vendor Advisory
• https://syss.de/pentest-blog/2020/syss-2020-028-sicherheitsschwachstelle-in-inneo-startup-tools-2017-und-2018 · Note