ABUS TVIP 11550/21550 Multiple Remote Vulnerabilities
BID:50058
Info
ABUS TVIP 11550/21550 Multiple Remote Vulnerabilities
| Bugtraq ID: | 50058 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 11 2011 12:00AM |
| Updated: | Oct 11 2011 12:00AM |
| Credit: | Marco van Berkum |
| Vulnerable: |
ABUS Security-Center ABUS TVIP 21550 0 ABUS Security-Center ABUS TVIP 11550 0 |
| Not Vulnerable: | |
Discussion
ABUS TVIP 11550/21550 Multiple Remote Vulnerabilities
ABUS TVIP 11550 and 21550 are prone to the following remote vulnerabilities:
1. An information-disclosure vulnerability
2. An arbitrary file-upload vulnerability
3. Multiple remote command-execution vulnerabilities
Attackers can exploit these issues to gain access to sensitive information, execute arbitrary commands and compromise the affected device. Other attacks are also possible.
ABUS TVIP 11550 and 21550 are prone to the following remote vulnerabilities:
1. An information-disclosure vulnerability
2. An arbitrary file-upload vulnerability
3. Multiple remote command-execution vulnerabilities
Attackers can exploit these issues to gain access to sensitive information, execute arbitrary commands and compromise the affected device. Other attacks are also possible.
Exploit / POC
ABUS TVIP 11550/21550 Multiple Remote Vulnerabilities
An attacker can exploit these issues through a browser.
An attacker can exploit these issues through a browser.
Solution / Fix
ABUS TVIP 11550/21550 Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
References
ABUS TVIP 11550/21550 Multiple Remote Vulnerabilities
References:
References: