PT-2020-3968 · Ericom · Ericom Access Server

Published 2020-08-25 · Updated 2020-09-01 · CVE-2020-24548

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Ericom Access Server version 9.2.0

Description: The issue is related to insufficient validation of incoming requests, allowing an attacker to perform a Server Side Request Forgery (SSRF) attack. This can enable the attacker to make outbound WebSocket connection requests on arbitrary TCP ports. The server provides error messages, such as "Cannot connect to" notifications, which can inform the attacker about closed ports.

Recommendations: For Ericom Access Server version 9.2.0, consider restricting access to the WebSocket connection functionality to minimize the risk of SSRF attacks until a patch is available. As a temporary workaround, disabling outbound connections on arbitrary TCP ports may help mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2020-04362

CVE-2020-24548

Affected Products

Ericom Access Server

References · 8

• 🔥 https://youtube.com/watch?v=oDTd-yRxVJ0 · Exploit
• 🔥 http://packetstormsecurity.com/files/158962/Ericom-Access-Server-9.2.0-Server-Side-Request-Forgery.html · Exploit
• https://bdu.fstec.ru/vul/2020-04362 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24548 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24548 · Security Note
• https://cxsecurity.com/issue/WLB-2020080120 · Note
• https://t.me/defcon_news/55443 · Telegram Post
• https://packetstormsecurity.com/files/158962/Ericom-Access-Server-9.2.0-Server-Side-Request-Forgery.html · Note