PT-2021-14374 · Tellus+13 · Tellstick+13
Kaikreuzer
·
Published
2021-02-01
·
Updated
2021-02-05
·
CVE-2021-21266
CVSS v3.1
6.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
openHAB versions prior to 2.5.12
openHAB versions prior to 3.0.1
Description:
The issue allows attackers in the same network as the openHAB instance to retrieve internal information like the content of files from the file system through an XML external entity (XXE) attack. Responses to SSDP requests can be especially malicious. All add-ons that use SAX or JAXB parsing of externally received XML are potentially subject to this kind of attack. The following add-ons are potentially impacted: AvmFritz, BoseSoundtouch, DenonMarantz, DLinkSmarthome, Enigma2, FmiWeather, FSInternetRadio, Gce, Homematic, HPPrinter, IHC, Insteon, Onkyo, Roku, SamsungTV, Sonos, Tellstick, TR064, UPnPControl, Vitotronic, Wemo, YamahaReceiver, and XPath Tranformation.
Recommendations:
For openHAB versions prior to 2.5.12, update to version 2.5.12 or later to fix the vulnerability by a more strict configuration of the used XML parser.
For openHAB versions prior to 3.0.1, update to version 3.0.1 or later to fix the vulnerability by a more strict configuration of the used XML parser.
Fix
XXE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bose Soundtouch
Dlinksmarthome
Denonmarantz
Hp Sprinter
Homematic
Insteon
Onkyo
Roku
Samsungtv
Sonos
Tellstick
Vitotronic
Wemo
Yamahareceiver