PT-2021-11403 · Rostelecom · Rostelecom Cs-C2Shw

Published 2021-01-25 · Updated 2021-02-02 · CVE-2020-27541

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Rostelecom CS-C2SHW version 5.0.082.1

Description: The issue is related to a Denial of Service vulnerability. It occurs due to a bug in the AgentGreen service when parsing broadcast discovery UDP packets. If a packet of too small size is sent, it leads to an attempt to allocate a buffer of negative size. As a result, the AgentGreen service will be terminated and restarted later.

Recommendations: For Rostelecom CS-C2SHW version 5.0.082.1, consider disabling the AgentGreen service until a patch is available to prevent potential Denial of Service attacks. Restrict access to the UDP packet parsing functionality to minimize the risk of exploitation. Avoid sending UDP packets of small size to the affected service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-27541

Affected Products

Rostelecom Cs-C2Shw

References · 4

• 🔥 https://dil4rd.medium.com/groundhog-day-in-iot-valley-or-5-cves-in-1-camera-7dc1d2864707 · Exploit
• https://osv.dev/vulnerability/CVE-2020-27541 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27541 · Security Note
• https://t.me/cibsecurity/22638 · Telegram Post