PT-2020-17187 · Urve · Urve

Published 2020-12-23 · Updated 2022-04-26 · CVE-2020-29551

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions URVE Build 24.03.2020

Description An issue was discovered in URVE, allowing access to various files and scripts, including internal/pc/shutdown.php, which can be used to shut down the system. Other accessible files and scripts include internal/pc/abort.php, internal/pc/restart.php, internal/pc/vpro.php, internal/pc/wake.php, internal/error u201409.txt, internal/runcmd.php, internal/getConfiguration.php, ews/autoload.php, ews/del.php, ews/mod.php, ews/sync.php, utils/backup/backup server.php, utils/backup/restore server.php, MyScreens/timeline.config, kreator.html5/test.php, and addedlogs.txt.

Recommendations As a temporary workaround, consider restricting access to the internal/pc/shutdown.php path and other accessible files and scripts until a patch is available. Restrict access to the internal directory to minimize the risk of exploitation. Avoid using the URVE Build 24.03.2020 until a fixed version is released. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-29551

Affected Products

Urve

References · 9

• 🔥 http://seclists.org/fulldisclosure/2020/Dec/48 · Exploit
• 🔥 https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-041.txt · Exploit
• 🔥 http://packetstormsecurity.com/files/160725/URVE-Software-Build-24.03.2020-Missing-Authorization.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-29551 · Vendor Advisory
• https://urve.co.uk/system-rezerwacji-sal · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29551 · Security Note
• https://t.me/cibsecurity/21231 · Telegram Post
• https://t.me/cvenotify/7937 · Telegram Post
• https://t.me/cvenotify/7759 · Telegram Post