PT-2022-3451 · Sercomm · Sercomm H500S

Published 2022-06-01 · Updated 2022-06-09 · CVE-2021-44080

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SerComm h500s versions prior to the fixed version

Description The issue exists due to the lack of neutralization of special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands via the connection type parameter. The vulnerability can be exploited through the "statussupport diagnostic tracing.json" endpoint, allowing logged-in administrators to execute arbitrary OS commands as root on the device.

Recommendations For SerComm h500s versions prior to the fixed version, consider disabling the statussupport diagnostic tracing.json endpoint until a patch is available. Restrict access to the connection type parameter to minimize the risk of exploitation. Avoid using the connection type parameter in the affected endpoint until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2022-04229

CVE-2021-44080

Affected Products

Sercomm H500S

References · 6

• 🔥 https://research.nccgroup.com/2022/05/24/technical-advisory-sercomm-h500s-authenticated-remote-command-execution-cve-2021-44080 · Exploit
• https://sercomm.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-44080 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04229 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-44080 · Security Note
• https://vuldb.com/ru/?id.201120 · Note