An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The Log Info page allows users to see log files by specifying their names. Due to a missing sanitization in the file name parameter, an authenticated attacker can inject arbitrary OS commands that are executed with root privileges.
Se descubrió un problema en Lantronix EDS5000 2.1.0.0R3. La página Log Info permite a los usuarios ver archivos de registro especificando sus nombres. Debido a una falta de sanitización en el parámetro del nombre de archivo, un atacante autenticado puede inyectar comandos arbitrarios del sistema operativo que se ejecutan con privilegios de root.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Type: Secondary
Exploitability Score: 2.8
Impact Score: 5.9
| Source | Type | Description |
|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-94
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| lantronix | eds5032_firmware | 2.1.0.0r3 | <built-in method update of dict object at 0x7763d83fc880> | Operating System |
| lantronix | eds5008_firmware | 2.1.0.0r3 | <built-in method update of dict object at 0x7763d83fe140> | Operating System |
| lantronix | eds5016_firmware | 2.1.0.0r3 | <built-in method update of dict object at 0x7763a290b300> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:lantronix:eds5032_firmware:2.1.0.0r3:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:lantronix:eds5032:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:lantronix:eds5008_firmware:2.1.0.0r3:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:lantronix:eds5008:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:lantronix:eds5016_firmware:2.1.0.0r3:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:lantronix:eds5016:-:*:*:*:*:*:*:* |