Remote code execution in Samsung SRN-1670D devices



Risk High
Patch available NO
Number of vulnerabilities 1
CVE-ID CVE-2017-16524
CWE-ID CWE-434
Exploitation vector Network
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
 Webviewer
Mobile applications / Apps for mobile phones

Vendor Samsung

Security Bulletin

This security bulletin contains one high risk vulnerability.

1) Arbitrary file upload

EUVDB-ID: #VU11186

Risk: High

CVSSv4.0: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber]

CVE-ID: CVE-2017-16524

CWE-ID: CWE-434 - Unrestricted Upload of File with Dangerous Type

Exploit availability: Yes

Description

The vulnerability allows a remote authenticated attacker to upload and execute arbitrary code on the target system.

The weakness exists in the network_ssl_upload.php code due to improper security restrictions on file uploads. A remote attacker can upload a specially crafted file with a .php extension and execute arbitrary code.

Successful exploitation of the vulnerability may result in system compromise.

Mitigation

Cybersecurity is currently unaware of any solutions addressing the vulnerability.

Vulnerable software versions

Webviewer: 1.0.0.193

CPE2.3 External links

https://github.com/realistic-security/CVE-2017-16524


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to trick the victim to perform certain actions on the device.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, a fully functional exploit for this vulnerability is available.



###SIDEBAR###