PT-2020-16439 · Damstra · Damstra Smart Asset

Lukasz Studniarz · Published 2020-10-02 · Updated 2020-10-06 · CVE-2020-26525

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Damstra Smart Asset version 2020.7

Description The issue allows for SQL injection via the "API/api/Asset" endpoint, specifically through the originator parameter. This enables an attacker to force the database and server to initiate remote connections to third-party DNS servers.

Recommendations For Damstra Smart Asset version 2020.7, as a temporary workaround, consider restricting access to the "API/api/Asset" endpoint until a patch is available. Avoid using the originator parameter in this endpoint to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-26525

Affected Products

Damstra Smart Asset

References · 5

• 🔥 https://github.com/lukaszstu/SmartAsset-SQLinj-CVE-2020-26525/blob/main/README.md · Exploit
• https://support.damstratechnology.com/hc/en-us/categories/900000115446-SmartAsset-Damstra-Asset-Management-Platform · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26525 · Vendor Advisory
• https://smartasset.com.au · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26525 · Security Note