SB2018021904 - Multiple vulnerabilities in NAT32

Description

This security bulletin contains information about 2 vulnerabilities.

1) Cross-site request forgery (CVE-ID: CVE-2018-6941)

CWE-ID: CWE-352 - Cross-Site Request Forgery (CSRF)

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/U:Clear

The vulnerability allows a remote unauthorized attacker to perform CSRF attack.

The weakness exists due to improper validation of user-supplied input by the HTTPD component. A remote attacker can create a specially crafted HTTP request, trick the victim into visiting it, perform cross-site scripting attacks, Web cache poisoning, and other malicious activities.

2) Command injection (CVE-ID: CVE-2018-6940)

CWE-ID: CWE-77 - Command injection

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber

The vulnerability allows a remote attacker to execute arbitrary command on the target system. 

 The weakness exists due to an error within the Password Checking feature. An attacker can disable Password Checking, inject and execute arbitrary commands.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References

• https://www.exploit-db.com/exploits/44034/
• https://www.exploit-db.com/exploits/44033/