Lucene search

MitreCVE-2017-5368

HistoryFeb 06, 2017 - 5:59 p.m.

CVE-2017-5368

2017-02-0617:59:00

CWE-352

mitre

web.nvd.nist.gov

zoneminder

cctv

csrf

vulnerability

remote attack

admin user

security

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.007

Percentile

80.7%

JSON

ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF (Cross Site Request Forgery) which allows a remote attack to make changes to the web application as the current logged in victim. If the victim visits a malicious web page, the attacker can silently and automatically create a new admin user within the web application for remote persistence and further attacks. The URL is /zm/index.php and sample parameters could include action=user uid=0 newUser[Username]=attacker1 newUser[Password]=Password1234 conf_password=Password1234 newUser[System]=Edit (among others).

Affected configurations

Nvd

Node

zoneminderzoneminderMatch1.29.0

zoneminderzoneminderMatch1.30.0

VendorProductVersionCPE
zoneminderzoneminder1.29.0cpe:2.3:a:zoneminder:zoneminder:1.29.0:*:*:*:*:*:*:*
zoneminderzoneminder1.30.0cpe:2.3:a:zoneminder:zoneminder:1.30.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zoneminder	zoneminder	1.29.0	cpe:2.3:a:zoneminder:zoneminder:1.29.0:::::::*
zoneminder	zoneminder	1.30.0	cpe:2.3:a:zoneminder:zoneminder:1.30.0:::::::*