CVE-2017-14135

CRITICALNuclei

dreambox opendreambox Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2017-14135 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jun 13, 2019 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

opendreambox

Browse dreambox / opendreambox
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALOpenDreambox 2.0.0 - Remote Code ExecutionCVSS 9.8

OpenDreambox 2.0.0 is susceptible to remote code execution via the webadmin plugin. Remote attackers can execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI in enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the target system.

Remediation

Apply the latest security patches or upgrade to a patched version of OpenDreambox.

WeaknessesCWE-78
Authorsalph4byt3
Template tagscvecve2017dreamboxrceoastedbvkevvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:dreambox:opendreambox:2.0:*:*:*:*:*:*:*
Shodan: title:"Dreambox WebControl"
Shodan: http.title:"dreambox webcontrol"
FOFA: title="dreambox webcontrol"
Google: intitle:"dreambox webcontrol"
https://the-infosec.com/2017/05/12/from-shodan-to-rce-opendreambox-2-0-0-code-execution/ https://www.exploit-db.com/exploits/42293 https://nvd.nist.gov/vuln/detail/CVE-2017-14135 https://the-infosec.com/2017/07/05/from-shodan-to-rce-opendreambox-2-0-0-code-execution/ https://github.com/qazbnm456/awesome-cve-poc

Source: ProjectDiscovery

References

2