Mimosa Client Radios up to 2.2.2 Web Interface GET Parameter information disclosure

Summaryinfo

A vulnerability, which was classified as problematic, was found in Mimosa Client Radios up to 2.2.2. This vulnerability affects unknown code of the component Web Interface. The manipulation as part of GET Parameter results in information disclosure. This vulnerability is cataloged as CVE-2017-9136. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Mimosa Client Radios up to 2.2.2. It has been classified as problematic. Affected is some unknown functionality of the component Web Interface. The manipulation as part of a GET Parameter leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. CVE summarizes:

An issue was discovered on Mimosa Client Radios before 2.2.3. In the device's web interface, there is a page that allows an attacker to use an unsanitized GET parameter to download files from the device as the root user. The attacker can download any file from the device's filesystem. This can be used to view unsalted, MD5-hashed administrator passwords, which can then be cracked, giving the attacker full admin access to the device's web interface. This vulnerability can also be used to view the plaintext pre-shared key (PSK) for encrypted wireless connections, or to view the device's serial number (which allows an attacker to factory reset the device).

The bug was discovered 05/12/2017. The weakness was shared 05/21/2017 (Website). The advisory is shared for download at blog.iancaling.com. This vulnerability is traded as CVE-2017-9136 since 05/21/2017. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.

The vulnerability was handled as a non-public zero-day exploit for at least 9 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 2.2.3 eliminates this vulnerability.

The entries VDB-101539, VDB-101540, VDB-101541 and VDB-101542 are related to this item. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Mimosa

Name

• Client Radios

Version

• 2.2.0
• 2.2.1
• 2.2.2

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion