PT-2025-9505 · Cubro · Cubro Exa48200

Tim Wörner · Published 2025-03-03 · Updated 2025-03-07 · CVE-2024-55570

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cubro EXA48200 network packet broker versions prior to V5.0R14.5P4-V3.3R1

Description The issue concerns incorrect access control in the Cubro EXA48200 network packet broker. It allows remote authenticated users to increase their privileges by sending a single HTTP PUT request to the "/api/user/users" endpoint in the web GUI with the rolename set to Administrator.

Recommendations For versions prior to V5.0R14.5P4-V3.3R1, update to V5.0R14.5P4-V3.3R1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/api/user/users" endpoint to prevent unauthorized privilege escalation.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2024-55570

Affected Products

Cubro Exa48200

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-55570 · Security Note
• https://twitter.com/VulmonFeeds/status/1896635259657056392 · Twitter Post
• https://herolab.usd.de/security-advisories/usd-2024-0014 · Note
• https://herolab.usd.de/security-advisories · Note
• https://twitter.com/CVEnew/status/1897912350159909341 · Twitter Post