BaserCMS up to 3.0.15/4.1.0.1 os command injection

Summaryinfo

A vulnerability was found in BaserCMS up to 3.0.15/4.1.0.1. It has been classified as critical. This impacts an unknown function. This manipulation causes os command injection. This vulnerability is tracked as CVE-2018-0569. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability was found in BaserCMS up to 3.0.15/4.1.0.1 (Content Management System). It has been declared as critical. Affected by this vulnerability is an unknown code block. The manipulation with an unknown input leads to a os command injection vulnerability. The CWE definition for the vulnerability is CWE-78. The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors.

The bug was discovered 05/22/2018. The weakness was disclosed 06/26/2018 (Website). It is possible to read the advisory at jvn.jp. This vulnerability is known as CVE-2018-0569 since 11/27/2017. The attack can be launched remotely. The requirement for exploitation is a single authentication. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1202 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 35 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-119888, VDB-119889, VDB-119890 and VDB-119891 are pretty similar. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Content Management System

Name

• BaserCMS

Version

• 3.0.0
• 3.0.1
• 3.0.2
• 3.0.3
• 3.0.4
• 3.0.5
• 3.0.6
• 3.0.7
• 3.0.8
• 3.0.9
• 3.0.10
• 3.0.11
• 3.0.12
• 3.0.13
• 3.0.14
• 3.0.15
• 4.1.0.0
• 4.1.0.1

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion