Linksys E5350 up to 1.0.00.037 Web Interface /SysInfo.htm show_sysinfo access control

Summaryinfo

A vulnerability identified as critical has been detected in Linksys E5350 up to 1.0.00.037. This vulnerability affects the function show_sysinfo of the file /SysInfo.htm of the component Web Interface Handler. The manipulation leads to access control. This vulnerability is listed as CVE-2022-35572. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Linksys E5350 up to 1.0.00.037 (Router Operating System). This issue affects the function show_sysinfo of the file /SysInfo.htm of the component Web Interface Handler. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and lower, (and potentially other vendors/devices due to code reuse), the /SysInfo.htm URI does not require a session ID. This web page calls a show_sysinfo function which retrieves WPA passwords, SSIDs, MAC Addresses, serial numbers, WPS Pins, and hardware/firmware versions, and prints this information into the web page. This web page is visible when remote management is enabled. A user who has access to the web interface of the device can extract these secrets. If the device has remote management enabled and is connected directly to the internet, this vulnerability is exploitable over the internet without interaction.

The weakness was presented 09/13/2022. It is possible to read the advisory at willgu.es. The identification of this vulnerability is CVE-2022-35572 since 07/11/2022. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

By approaching the search of inurl:SysInfo.htm it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Linksys

Name

• E5350

Version

• 1.0.00.037

License

• commercial

Website

• Vendor: https://www.linksys.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion