Lucene search

MitreCVE-2018-12257

HistoryJun 12, 2018 - 6:29 p.m.

CVE-2018-12257

2018-06-1218:29:00

CWE-295

mitre

web.nvd.nist.gov

momentum axel

720p

5.1.8 devices

authenticated

custom firmware upgrade

dns hijacking

ssl validation

firmware

security vulnerability

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

AI Score

4.7

Confidence

High

EPSS

Percentile

12.8%

JSON

An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hijacking. An authenticated root user with CLI access is able to remotely upgrade firmware to a custom image due to lack of SSL validation by changing the nameservers in /etc/resolv.conf to the attacker’s server, and serving the expected HTTPS response containing new firmware for the device to download.

Affected configurations

Nvd

Node

apollotechnologiesincmomentum_axel_720p_firmwareMatch5.1.8

AND

apollotechnologiesincmomentum_axel_720pMatch-

VendorProductVersionCPE
apollotechnologiesincmomentum_axel_720p_firmware5.1.8cpe:2.3:o:apollotechnologiesinc:momentum_axel_720p_firmware:5.1.8:*:*:*:*:*:*:*
apollotechnologiesincmomentum_axel_720p-cpe:2.3:h:apollotechnologiesinc:momentum_axel_720p:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apollotechnologiesinc	momentum_axel_720p_firmware	5.1.8	cpe:2.3:o:apollotechnologiesinc:momentum_axel_720p_firmware:5.1.8:::::::*
apollotechnologiesinc	momentum_axel_720p	-	cpe:2.3:h:apollotechnologiesinc:momentum_axel_720p:-:::::::*

References

rchase.com/downloads/momentum-iot-penetration-test-report.pdf

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

AI Score

4.7

Confidence

High

EPSS

Percentile

12.8%

JSON

Related for CVE-2018-12257