PT-2020-9684 · Linkplay · Linkplay Firmware

Published 2020-07-01 · Updated 2021-07-21 · CVE-2019-15310

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linkplay firmware (affected versions not specified)

Description An issue was discovered in the Linkplay firmware, allowing WAN remote code execution without user interaction. An attacker could retrieve the AWS key from the firmware, gaining full control over Linkplay's AWS estate, including S3 buckets containing device firmware. When combined with an OS command injection vulnerability within the XML Parsing logic of the firmware update process, an attacker could gain code execution on any device that attempted to update. By default, all devices tested had automatic updates enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

IDOR

OS Command Injection

Weakness Enumeration

CWE-639

CWE-78

Related Identifiers

CVE-2019-15310

Affected Products

Linkplay Firmware

References · 6

• 🔥 https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-15310 · Security Note
• https://labs.mwrinfosecurity.com/advisories · Note
• https://linkplay.com/featured-products · Note
• https://t.me/cibsecurity/13208 · Telegram Post
• https://t.me/cvenotify/4785 · Telegram Post