PT-2022-5792 · Unknown+3 · Luci-Mod-System+3

Eric Mcdonald · Published 2022-09-21 · Updated 2022-11-04 · CVE-2022-41435

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenWrt LuCI version git-22.140.66206-02913be

Description The issue is related to a stored cross-site scripting (XSS) vulnerability in the /system/sshkeys.js component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted public key comments. The vulnerability is also related to the luci-mod-system module of the LuCI web interface configuration in the OpenWrt embedded operating system, which fails to protect the web page structure when processing the SSH key from the /etc/dropbear/authorized keys file. This can enable a remote attacker to perform cross-site scripting attacks.

Recommendations For OpenWrt LuCI version git-22.140.66206-02913be, consider disabling the /system/sshkeys.js component until a patch is available. Restrict access to the SSH key comments to minimize the risk of exploitation. Avoid using crafted public key comments in the affected component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2022-07192

CVE-2022-41435

Affected Products

Luci

Openwrt

Dropbear

Luci-Mod-System

References · 6

• 🔥 https://gist.github.com/librick/eacf19bcfc5ca964e0882b4ef9864bf5 · Exploit
• https://github.com/openwrt/luci/commit/944b55738e7f9685865d5298248b7fbd7380749e · Patch
• https://osv.dev/vulnerability/CVE-2022-41435 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41435 · Security Note
• https://bdu.fstec.ru/vul/2022-07192 · Security Note
• https://t.me/cibsecurity/52500 · Telegram Post