PT-2020-4508 · Eclipse+2 · Mosquitto+2

Published 2020-11-03 · Updated 2022-06-07 · CVE-2020-13537

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moxa MXView version 3.1.8

Description The issue is related to incorrect default permission settings, allowing an attacker to execute arbitrary commands with system user privileges by exploiting a local privilege elevation vulnerability in the file system permissions of Moxa MXView. This can be achieved by adding code to a script or replacing a binary, taking advantage of the MXViewService, which runs as a NT SYSTEM authority user and executes a series of Node.Js scripts to start additional application functionality, including the mosquitto executable.

Recommendations For Moxa MXView version 3.1.8, consider restricting access to the MXViewService and the Node.Js scripts it executes to minimize the risk of exploitation. Additionally, review the file system permissions to ensure they are properly set to prevent unauthorized modifications. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2020-05057

CVE-2020-13537

Affected Products

Moxa Mxview

Node.Js

Mosquitto

References · 7

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1148 · Exploit
• https://osv.dev/vulnerability/CVE-2020-13537 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05057 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-13537 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3459 · Security Note
• https://t.me/cibsecurity/15913 · Telegram Post
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-cmdinj-b63rwKPm · Note