Mitel 6869i up to 4.5.0.41/5.0.0.1018 provis.html Hostname os command injection

Summaryinfo

A vulnerability classified as critical has been found in Mitel 6869i up to 4.5.0.41/5.0.0.1018. This issue affects some unknown processing of the file provis.html. The manipulation of the argument Hostname leads to os command injection. This vulnerability is listed as CVE-2024-37569. The attack may be initiated remotely. In addition, an exploit is available.

Detailsinfo

A vulnerability was found in Mitel 6869i up to 4.5.0.41/5.0.0.1018. It has been rated as critical. This issue affects some unknown processing of the file provis.html. The manipulation of the argument hostname with an unknown input leads to a os command injection vulnerability. Using CWE to declare the problem leads to CWE-78. The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A command injection vulnerability exists in the hostname parameter taken in by the provis.html endpoint. The provis.html endpoint performs no sanitization on the hostname parameter (sent by an authenticated user), which is subsequently written to disk. During boot, the hostname parameter is executed as part of a series of shell commands. Attackers can achieve remote code execution in the root context by placing shell metacharacters in the hostname parameter.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2024-37569 since 06/09/2024. The exploitation is known to be easy. The attack may be initiated remotely. Technical details as well as a public exploit are known. The attack technique deployed by this issue is T1202 according to MITRE ATT&CK.

The exploit is available at github.com. It is declared as proof-of-concept. By approaching the search of inurl:provis.html it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Mitel

Name

• 6869i

Version

• 4.5.0.0
• 4.5.0.1
• 4.5.0.2
• 4.5.0.3
• 4.5.0.4
• 4.5.0.5
• 4.5.0.6
• 4.5.0.7
• 4.5.0.8
• 4.5.0.9
• 4.5.0.10
• 4.5.0.11
• 4.5.0.12
• 4.5.0.13
• 4.5.0.14
• 4.5.0.15
• 4.5.0.16
• 4.5.0.17
• 4.5.0.18
• 4.5.0.19
• 4.5.0.20
• 4.5.0.21
• 4.5.0.22
• 4.5.0.23
• 4.5.0.24
• 4.5.0.25
• 4.5.0.26
• 4.5.0.27
• 4.5.0.28
• 4.5.0.29
• 4.5.0.30
• 4.5.0.31
• 4.5.0.32
• 4.5.0.33
• 4.5.0.34
• 4.5.0.35
• 4.5.0.36
• 4.5.0.37
• 4.5.0.38
• 4.5.0.39
• 4.5.0.40
• 4.5.0.41
• 5.0.0.1018

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

Video

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion