PT-2021-17755 · Express+1 · Express+1

Rashley-Iqtop · Published 2021-03-10 · Updated 2022-07-12 · CVE-2021-28122

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Open5GS versions 2.1.3 through 2.2.x before 2.2.1

Description: A request-validation issue was discovered in the WebUI component, allowing an unauthenticated user to use a crafted HTTP API request to create, read, update, or delete entries in the subscriber database. For example, new administrative users can be added. The issue occurs because Express is not set up to require authentication.

Recommendations: For Open5GS versions 2.1.3 through 2.2.x before 2.2.1, consider setting up Express to require authentication for the WebUI component to prevent unauthorized access to the subscriber database. As a temporary workaround, consider restricting access to the WebUI component until a patch is available.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2021-28122

Affected Products

Express

Open5Gs

References · 8

• 🔥 https://github.com/open5gs/open5gs/issues/837 · Exploit
• https://github.com/open5gs/open5gs/pull/838 · Patch
• https://github.com/open5gs/open5gs/compare/v2.2.0...v2.2.1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-28122 · Security Note
• https://osv.dev/vulnerability/CVE-2021-28122 · Vendor Advisory
• https://github.com/open5gs/open5gs/releases · Note
• https://t.me/cvenotify/11570 · Telegram Post
• https://t.me/cvenotify/12049 · Telegram Post