PT-2024-29472 · Skylab · Skylab Igx Iiot Gateway

Mah Chia Hui + 1 · Published 2024-04-26 · Updated 2024-07-03 · CVE-2024-4163

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Skylab IGX IIoT Gateway (affected versions not specified)

Description The Skylab IGX IIoT Gateway has a security issue where the limited shell terminal process runs under root privileges, allowing an attacker to read, write, and modify any file in the operating system. This can be achieved by utilizing the limited shell file exec and download functions. An attacker can replace the /etc/passwd file with a new root user entry, enabling them to breakout from the limited shell and login to an unrestricted shell with root access. With root access, the attacker can take full control of the IIoT Gateway.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-4163

Affected Products

Skylab Igx Iiot Gateway

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-4163 · Security Note
• https://govtech-csg.github.io/security-advisories/2024/04/25/CVE-2024-4163.html · Note
• https://twitter.com/CrowdCyber_Com/status/1783850105017127264 · Twitter Post
• https://t.me/cvenotify/78079 · Telegram Post
• https://twitter.com/Komodosec/status/1783917985939526088 · Twitter Post
• https://t.me/pentestingnews/46300 · Telegram Post