CVE-2019-13140
MEDIUMInteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 - Unauthenticated 3DES Key Extraction via JUCI ACL Misconfiguration
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-13140. PoCs published by Gerard Fuguet.
AI-analyzed exploit summary This exploit leverages a JUCI ACL misconfiguration in Inteno IOPSYS Gateway to extract a 3DES key via JSON commands over WebSocket, which can then be used to decrypt a provisioning file containing sensitive information like SIP credentials.
Description
Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP.
Exploits (1)
This exploit leverages a JUCI ACL misconfiguration in Inteno IOPSYS Gateway to extract a 3DES key via JSON commands over WebSocket, which can then be used to decrypt a provisioning file containing sensitive information like SIP credentials.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N