PT-2024-5379 · Omnivise · Omnivise T3000 R8.2 Sp3+2

Published 2024-06-21 · Updated 2024-09-17 · CVE-2024-38878

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:N/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Omnivise T3000 Application Server R9.2 (All versions) Omnivise T3000 R8.2 SP3 (All versions) Omnivise T3000 R8.2 SP4 (All versions)

Description The issue is related to incorrect restriction of a directory path with limited access. This could allow a remote attacker to upload arbitrary files. The vulnerability affects devices that allow authenticated users to export diagnostics data through a susceptible API endpoint, which could enable an authenticated attacker to download arbitrary files from the file system.

Recommendations For Omnivise T3000 Application Server R9.2, restrict access to the API endpoint related to diagnostics data export until a patch is available. For Omnivise T3000 R8.2 SP3, consider disabling the diagnostics data export feature to minimize the risk of exploitation. For Omnivise T3000 R8.2 SP4, avoid using the susceptible API endpoint for diagnostics data export until the issue is resolved.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-06013

CVE-2024-38878

Affected Products

Omnivise T3000 Application Server R9.2

Omnivise T3000 R8.2 Sp3

Omnivise T3000 R8.2 Sp4

References · 8

• https://osv.dev/vulnerability/CVE-2024-38878 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-857368.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38878 · Security Note
• https://bdu.fstec.ru/vul/2024-06013 · Security Note
• https://t.me/cvenotify/94935 · Telegram Post
• https://vuldb.com/?id.273496 · Note
• https://t.me/cvedetector/2348 · Telegram Post
• http://seclists.org/fulldisclosure/2024/Nov/5 · Note