Edimax BR-6208AC V1 ARP Broadcast access control

Summaryinfo

A vulnerability, which was classified as critical, has been found in Edimax BR-6208AC V1. The impacted element is an unknown function of the component ARP Handler. The manipulation as part of Broadcast leads to access control. This vulnerability is traded as CVE-2019-13271. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to apply restrictive firewalling.

Detailsinfo

A vulnerability was found in Edimax BR-6208AC V1 (affected version unknown). It has been rated as critical. This issue affects an unknown functionality of the component ARP Handler. The manipulation as part of a Broadcast leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage as a direct covert channel, the sender can trivially issue an ARP request to an arbitrary computer on the network. (In general, some routers restrict ARP forwarding only to requests destined for the network's subnet mask, but these routers did not restrict this traffic in any way. Depending on this factor, one must use either the lower 8 bits of the IP address, or the entire 32 bits, as the data payload.)

The weakness was shared 08/27/2019. The identification of this vulnerability is CVE-2019-13271 since 07/04/2019. The attack can only be done within the local network. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

Addressing this vulnerability is possible by firewalling .

The entries VDB-140938 and VDB-140937 are related to this item. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Edimax

Name

• BR-6208AC V1

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion