Lucene search

MitreCVE-2017-9383

HistoryJun 17, 2019 - 8:15 p.m.

CVE-2017-9383

2019-06-1720:15:09

CWE-287

mitre

web.nvd.nist.gov

cve-2017-9383

vera veraedge

veralite

upnp

security vulnerability

unauthorized access

port 3480

port 80

wget

curl module

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.035

Percentile

91.6%

JSON

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url “/port_3480”. It seems that the UPnP services provide “wget” as one of the service actions for a normal user to connect the device to an external website. It retrieves the parameter “URL” from the query string and then passes it to an internal function that uses the curl module on the device to retrieve the contents of the website.

Affected configurations

Nvd

Node

getveraveraedge_firmwareRange≤1.7.19

AND

getveraveraedgeMatch-

Node

getveraveralite_firmwareRange≤1.7.481

AND

getveraveraliteMatch-

VendorProductVersionCPE
getveraveraedge_firmware*cpe:2.3:o:getvera:veraedge_firmware:*:*:*:*:*:*:*:*
getveraveraedge-cpe:2.3:h:getvera:veraedge:-:*:*:*:*:*:*:*
getveraveralite_firmware*cpe:2.3:o:getvera:veralite_firmware:*:*:*:*:*:*:*:*
getveraveralite-cpe:2.3:h:getvera:veralite:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
getvera	veraedge_firmware	*	cpe:2.3:o:getvera:veraedge_firmware::::::::
getvera	veraedge	-	cpe:2.3:h:getvera:veraedge:-:::::::*
getvera	veralite_firmware	*	cpe:2.3:o:getvera:veralite_firmware::::::::
getvera	veralite	-	cpe:2.3:h:getvera:veralite:-:::::::*

References

packetstormsecurity.com/files/153242/Veralite-Veraedge-Router-XSS-Command-Injection-CSRF-Traversal.html

github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Vera_sec_issues.pdf

seclists.org/bugtraq/2019/Jun/8

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.035

Percentile

91.6%

JSON

Related for CVE-2017-9383