CVE-2016-10042 in SLT-00 Star*
Summary
by MITRE
Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticated HTTP request, leading to denial of service and information disclosure.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 10/21/2019
The CVE-2016-10042 vulnerability represents a critical authorization bypass flaw within the web interface of Arcadyan SLT-00 Star* devices, commonly known as the Swisscom Internet-Box. This vulnerability affects firmware versions prior to R7.7 and exposes a fundamental security weakness in the device's access control mechanisms. The flaw allows attackers to manipulate the static routing table without proper authentication, creating a pathway for unauthorized system reconfiguration that can have severe operational consequences.
The technical implementation of this vulnerability stems from insufficient input validation and authentication checks within the device's web management interface. Specifically, the device fails to properly verify user credentials before processing HTTP requests intended for routing table modifications. This authorization bypass occurs at the application layer where the web server processes incoming requests without adequate session management or access control validation. The vulnerability manifests when an attacker sends an unauthenticated HTTP request that directly targets the routing table configuration endpoints, effectively circumventing the normal authentication flow that should protect these critical system functions.
The operational impact of this vulnerability extends beyond simple unauthorized access to encompass significant security implications including denial of service conditions and potential information disclosure. When an attacker successfully manipulates the static routing table, they can redirect network traffic through unintended pathways, potentially causing network disruption or creating opportunities for further attacks. The denial of service aspect occurs when malicious routing modifications render network services unavailable or redirect traffic to unintended destinations. Additionally, the vulnerability may expose sensitive network information that would otherwise be protected by proper access controls, potentially revealing internal network topology or configuration details.
From a cybersecurity framework perspective, this vulnerability aligns with CWE-285 (Improper Authorization) and represents a clear violation of the principle of least privilege. The ATT&CK framework categorizes this issue under T1068 (Local Port Forwarding) and T1071.004 (Application Layer Protocol: DNS) as attackers could leverage the routing table modifications to redirect traffic or establish unauthorized communication channels. The vulnerability also demonstrates weaknesses in the device's defense-in-depth strategy, where multiple layers of security should have prevented unauthorized access to critical system functions.
Mitigation strategies for this vulnerability require immediate firmware updates to versions R7.7 or later where the authorization bypass has been addressed. Network administrators should implement network segmentation to limit access to these devices and deploy intrusion detection systems to monitor for suspicious HTTP requests targeting routing table endpoints. Additional protective measures include disabling unnecessary web management interfaces, implementing strict firewall rules, and conducting regular security assessments to identify similar authorization bypass vulnerabilities. The vulnerability highlights the importance of proper authentication mechanisms and input validation in embedded network devices, particularly those with web-based management interfaces that are frequently targeted by attackers seeking to establish persistent access to network infrastructure.