CVE-2017-8835

Опубликовано: 05 июн. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. An attack vector is the bauth cookie to cgi-bin/MANGA/admin.cgi. One impact is enumeration of user accounts by observing whether a session ID can be retrieved from the sessions database.

Ссылки

http://seclists.org/bugtraq/2017/Jun/1
Mailing List
Third Party Advisory
https://www.exploit-db.com/exploits/42130/
https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/
Patch
Third Party Advisory
http://seclists.org/bugtraq/2017/Jun/1
Mailing List
Third Party Advisory
https://www.exploit-db.com/exploits/42130/
https://www.x41-dsec.de/lab/advisories/x41-2017-005-peplink/
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:peplink:b305hw2_firmware:7.0.1:*:*:*:*:*:*:*

cpe:2.3:h:peplink:balance_305:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:peplink:380hw6_firmware:7.0.1:*:*:*:*:*:*:*

cpe:2.3:h:peplink:balance_380:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:peplink:580hw2_firmware:7.0.1:*:*:*:*:*:*:*

cpe:2.3:h:peplink:balance_580:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:peplink:710hw3_firmware:7.0.1:*:*:*:*:*:*:*

cpe:2.3:h:peplink:balance_710:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:peplink:1350hw2_firmware:7.0.1:*:*:*:*:*:*:*

cpe:2.3:h:peplink:balance_1350:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:peplink:2500_firmware:7.0.1:*:*:*:*:*:*:*

cpe:2.3:h:peplink:balance_2500:-:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.63815

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-cwh4-2qh3-3jxc

CVSS3: 9.8

github

больше 3 лет назад

EPSS

Процентиль: 98%

0.63815

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89