Huawei B593u-12 And T-Mobile HOME NET Router Multiple Security Vulnerabilities
BID:65132
Info
Huawei B593u-12 And T-Mobile HOME NET Router Multiple Security Vulnerabilities
| Bugtraq ID: | 65132 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 12 2013 12:00AM |
| Updated: | Dec 12 2013 12:00AM |
| Credit: | J. Greil, asiantuntijakaveri@ichtyotoxism |
| Vulnerable: |
T-Mobile HOME NET Router V100R001C54SP063 Huawei B593u-12 V100R001C54SP063 |
| Not Vulnerable: |
T-Mobile HOME NET Router V100R001C55SP102 |
Discussion
Huawei B593u-12 And T-Mobile HOME NET Router Multiple Security Vulnerabilities
Huawei B593u-12 And T-Mobile HOME NET Router are prone to the following security vulnerabilities:
1. An information-disclosure vulnerability
2. A security-bypass vulnerability
3. A command-injection vulnerability
4. A directory-traversal vulnerability.
5. A cross-site request-forgery vulnerability
Exploiting these issues may allow a remote attacker to obtain sensitive information, perform certain administrative actions, bypass certain security restrictions, access arbitrary files, execute arbitrary commands, and gain unauthorized access to the affected device. Other attacks are also possible.
The following products are vulnerable:
Huawei B593u-12 version V100R001C54SP063
T-Mobile HOME NET Router version V100R001C54SP063
Huawei B593u-12 And T-Mobile HOME NET Router are prone to the following security vulnerabilities:
1. An information-disclosure vulnerability
2. A security-bypass vulnerability
3. A command-injection vulnerability
4. A directory-traversal vulnerability.
5. A cross-site request-forgery vulnerability
Exploiting these issues may allow a remote attacker to obtain sensitive information, perform certain administrative actions, bypass certain security restrictions, access arbitrary files, execute arbitrary commands, and gain unauthorized access to the affected device. Other attacks are also possible.
The following products are vulnerable:
Huawei B593u-12 version V100R001C54SP063
T-Mobile HOME NET Router version V100R001C54SP063
Exploit / POC
Huawei B593u-12 And T-Mobile HOME NET Router Multiple Security Vulnerabilities
An attacker can exploit these issues through a browser or readily available tools. To exploit the cross-site request-forgery issue, the attacker must entice an unsuspecting victim into following a malicious URI.
An attacker can exploit these issues through a browser or readily available tools. To exploit the cross-site request-forgery issue, the attacker must entice an unsuspecting victim into following a malicious URI.