Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-40893. PoCs published by xen0bit.
AI-analyzed exploit summary This repository contains functional exploit code for CVE-2024-40893, which involves command injection vulnerabilities in Firewalla devices via Bluetooth Low-Energy (BLE). The PoC demonstrates license UUID leakage, root SSH credential provisioning, and command injection through network configuration fields.
Description
Multiple authenticated operating system (OS) command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy (BTLE) interface can use the network configuration service to inject commands in various configuration parameters including networkConfig.Interface.Phy.Eth0.Extra.PingTestIP, networkConfig.Interface.Phy.Eth0.Extra.DNSTestDomain, and networkConfig.Interface.Phy.Eth0.Gateway6. Additionally, because the configuration can be synced to the Firewalla cloud, the attacker may be able to persist access even after hardware resets and firmware re-flashes.
Exploits (1)
This repository contains functional exploit code for CVE-2024-40893, which involves command injection vulnerabilities in Firewalla devices via Bluetooth Low-Energy (BLE). The PoC demonstrates license UUID leakage, root SSH credential provisioning, and command injection through network configuration fields.
References (2)
Scores
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H