Dup Scout Enterprise Web Server GET Request memory corruption

Summaryinfo

A vulnerability, which was classified as critical, was found in Dup Scout Enterprise, Disk Savvy Enterprise, Sync Breeze Enterprise and Disk Pulse Enterprise. The impacted element is an unknown function of the component Web Server. Such manipulation as part of GET Request leads to memory corruption. This vulnerability is traded as CVE-2017-13696. The attack may be launched remotely. Furthermore, there is an exploit available.

Detailsinfo

A vulnerability, which was classified as very critical, has been found in Dup Scout Enterprise, Disk Savvy Enterprise, Sync Breeze Enterprise and Disk Pulse Enterprise (affected version not known). Affected by this issue is some unknown functionality of the component Web Server. The manipulation as part of a GET Request leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

The vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component. Successful exploitation of the software will allow an attacker to gain complete access to the system with NT AUTHORITY / SYSTEM level privileges. The vulnerability lies due to improper handling and sanitization of the incoming request.

The bug was discovered 02/22/2018. The weakness was shared 01/24/2018 as EDB-ID 42557 as not defined exploit (Exploit-DB). The advisory is available at exploit-db.com. This vulnerability is handled as CVE-2017-13696 since 08/25/2017. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are unknown but a public exploit is available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 12/27/2019).

After immediately, there has been an exploit disclosed. The exploit is available at exploit-db.com. It is declared as highly functional.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (42557). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• Disk Pulse Enterprise
• Disk Savvy Enterprise
• Dup Scout Enterprise
• Sync Breeze Enterprise

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion