PT-2020-6968 · Maipu · Maipu Mp1800X-50

Saket-Taneja · Published 2020-05-23 · Updated 2021-07-21 · CVE-2020-13896

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Maipu MP1800X-50 version 7.5.3.14(R)

Description The issue is related to insufficient access control in the web interface of the Maipu MP1800X-50 device. This allows a remote attacker to obtain sensitive information. The affected URI is "form/formDeviceVerGet", which can disclose details such as system id, hardware model, hardware version, bootloader version, software version, software image file, compilation time, and system uptime.

Recommendations For version 7.5.3.14(R), consider restricting access to the "form/formDeviceVerGet" URI to minimize the risk of exploitation. Additionally, limit the disclosure of sensitive information through the web interface until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2024-04461

CVE-2020-13896

Affected Products

Maipu Mp1800X-50

References · 5

• 🔥 https://gist.github.com/Saket-taneja/9576573122be1cb0d6dc9d9a73db5631 · Exploit
• https://bdu.fstec.ru/vul/2024-04461 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-13896 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13896 · Vendor Advisory
• https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2020-4165.html · Note