CVE-2018-18852

Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018.

CVSS v3 8.8 HIGH
CVSS v2.0 9.0 HIGH

8.8^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://www.fortiguard.com/zeroday/FG-VD-18-149	Third Party Advisory
https://www.fortiguard.com/zeroday/FG-VD-18-149	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:cerio:dt-300n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cerio:dt-300n:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:56

Type	Values Removed	Values Added
References	~~() https://www.fortiguard.com/zeroday/FG-VD-18-149 - Third Party Advisory~~	() https://www.fortiguard.com/zeroday/FG-VD-18-149 - Third Party Advisory

Information

Published : 2019-06-18 15:15

Updated : 2024-11-21 03:56

NVD link : CVE-2018-18852

Mitre link : CVE-2018-18852

CVE.ORG link : CVE-2018-18852

JSON object : View

Products Affected

cerio

dt-300n_firmware
dt-300n

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2018-18852", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2019-06-18T15:15:11.267", "references": [{"url": "https://www.fortiguard.com/zeroday/FG-VD-18-149", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.fortiguard.com/zeroday/FG-VD-18-149", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018."}, {"lang": "es", "value": "Los dispositivos Cerio DT-300N 1.1.6 a 1.1.12 permiten la inyecci\u00f3n de comandos del sistema operativo debido a una validaci\u00f3n incorrecta de la entrada del uso de la funci\u00f3n PING de la interfaz web de Save.cgi para ejecutar un comando ping, como se explot\u00f3 en la naturaleza en octubre de 2018."}], "lastModified": "2024-11-21T03:56:44.873", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cerio:dt-300n_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C9A2B88-3C7D-4735-AFA2-3A75DD6D7AC1", "versionEndIncluding": "1.1.12", "versionStartIncluding": "1.1.6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cerio:dt-300n:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4FB3CC31-0A49-4C70-9212-1857914029FF"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}