SB2017051705 - Two vulnerabilities in Detcon SiteWatch Gateway
Published: May 17, 2017
Security Bulletin ID
SB2017051705
CSH Severity
High
Patch available
YES
Number of vulnerabilities
2
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 2 vulnerabilities.
1) Improper authentication (CVE-ID: CVE-2017-6049)
CWE-ID: CWE-287 - Improper Authentication
CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The weakness exists due to improper authentication. A remote attacker can send a specially crafted HTTP GET request, bypass authentication and execute arbitrary code with root privileges.
Successful exploitation of the vulnerability may result in system compromise.
2) Information disclosure (CVE-ID: CVE-2017-6047)
CWE-ID: CWE-256 - Unprotected Storage of Credentials
CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The weakness exists due to storing of passwords in plaintext. A remote attacker can bypass authentication and change settings on the affected product or obtain user passwords to conduct further attacks.
Successful exploitation of the vulnerability may result in information disclosure.
Remediation
Install update from vendor's website.