BigPond Wireless Broadband Gateway Command Injection and Authentication Bypass Vulnerabilities

Bugtraq ID:	55907
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 12 2012 12:00AM
Updated:	Oct 12 2012 12:00AM
Credit:	Roberto Paleari
Vulnerable:
Not Vulnerable:

BigPond Wireless Broadband Gateway Command Injection and Authentication Bypass Vulnerabilities

Netcomm BigPond Wireless Broadband Gateway is prone to an authentication-bypass vulnerability and a command-injection vulnerability.

Exploiting these issues could allow a remote attacker to bypass authentication or execute arbitrary commands in the context of the affected device.

BigPond Wireless Broadband Gateway 3G21WB is affected; other versions may also be vulnerable.

BigPond Wireless Broadband Gateway Command Injection and Authentication Bypass Vulnerabilities

Attackers can use readily available tools to exploit the issues.

The following example URI is available:

http://www.example.com/ping.cgi?DIA_IPADDRESS=;%20cat%20/etc/passwd

BigPond Wireless Broadband Gateway Command Injection and Authentication Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are error or if you are aware of any more recent information, please mail us at: [email protected].

BigPond Wireless Broadband Gateway Command Injection and Authentication Bypass Vulnerabilities

References: