A vulnerability was found in Netsweeper 4.0.8. It has been rated as critical. Affected by this issue is an unknown code block of the component AJAX File Manager. The manipulation with an unknown input leads to a unrestricted upload vulnerability. Using CWE to declare the problem leads to CWE-434. The software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. Impacted is confidentiality, integrity, and availability.

The weakness was released 08/21/2015 (Website). The advisory is shared for download at packetstormsecurity.com. This vulnerability is handled as CVE-2014-9619 since 01/16/2015. The exploitation is known to be easy. The attack may be launched remotely. The requirement for exploitation is a simple authentication. Technical details are unknown but a public exploit is available. The MITRE ATT&CK project declares the attack technique as T1608.002.

After immediately, there has been an exploit disclosed. The exploit is available at exploit-db.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 270 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 3.1.10, 4.0.9 or 4.1.2 eliminates this vulnerability.

The vulnerability is also documented in the databases at X-Force (105936) and Exploit-DB (37932). Entries connected to this vulnerability are available at 77517 and 106829.

Productinfo

Name

• Netsweeper

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion