PT-2021-21316 · Prolink · Prolink Prc2402M

Ayrx · Published 2021-08-06 · Updated 2021-08-12 · CVE-2021-36705

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older

Description The issue concerns a command injection in the set TR069 function within the adm.cgi binary. This function is accessible when the page parameter is set to TR069. Specifically, the value of the TR069 local port parameter is directly passed to the system, allowing for potential exploitation.

Recommendations For ProLink PRC2402M versions 1.0.18 and older, consider disabling access to the adm.cgi binary with the page parameter set to TR069 until a fix is available. Restricting the use of the TR069 local port parameter in this context may also help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-36705

Affected Products

Prolink Prc2402M

References · 4

• 🔥 https://ayrx.me/prolink-prc2402m-multiple-vulnerabilities/#tr069-command-injection · Exploit
• https://osv.dev/vulnerability/CVE-2021-36705 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36705 · Security Note
• https://t.me/cvenotify/18782 · Telegram Post