PT-2020-9685 · Anker · Zolo Halo

Published 2020-07-01 · Updated 2021-07-21 · CVE-2019-15311

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zolo Halo devices via the Linkplay firmware (affected versions not specified)

Description An issue was discovered in Zolo Halo devices, allowing for LAN remote code execution. The devices have a GoAhead web server listening on port 80, and the /httpapi.asp endpoint is vulnerable to multiple command execution vulnerabilities.

Recommendations As a temporary workaround, consider disabling the /httpapi.asp endpoint until a patch is available. Restrict access to the GoAhead web server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2019-15311

Affected Products

Zolo Halo

References · 6

• 🔥 https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-15311 · Security Note
• https://t.me/cibsecurity/13207 · Telegram Post
• https://t.me/cvenotify/4786 · Telegram Post
• https://labs.mwrinfosecurity.com/advisories · Note
• https://linkplay.com/featured-products · Note