PT-2021-13797 · Unknown · Gryphon Tower

Evan Grant + 1 · Published 2021-12-09 · Updated 2021-12-13 · CVE-2021-20140

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Gryphon Tower routers (affected versions not specified)

Description: An unauthenticated command injection issue exists in the parameters of operation 10 in the controller server service. This allows an unauthenticated remote attacker on the same network to execute commands as root on the device by sending a specially crafted malicious packet to the controller server service on port 9999, specifically the /controller server endpoint, using vulnerable parameters.

Recommendations: As a temporary workaround, consider restricting access to the controller server service on port 9999 until a patch is available. Avoid using the vulnerable parameters in operation 10 of the controller server service until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-20140

Affected Products

Gryphon Tower

References · 4

• 🔥 https://tenable.com/security/research/tra-2021-51 · Exploit
• https://osv.dev/vulnerability/CVE-2021-20140 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20140 · Security Note
• https://t.me/cibsecurity/33693 · Telegram Post