CVE-2019-7385
An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U_2.0.0_140521_R4.1.47.002 or below, The values of the newpass and…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 12.2%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U_2.0.0_140521_R4.1.47.002 or below, The values of the newpass and confpass parameters in /bin/WebMGR are used in a system call in the firmware. Because there is no user input validation, this leads to authenticated code execution on the device.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 12.17% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- raisecom/iscom ht803g-u firmware · raisecom/iscom ht803g-w firmware · raisecom/iscom ht803g-1ge firmware · raisecom/iscom ht803g gpon firmware
- Source
- cve@mitre.org
References
- http://breakthesec.comThird Party Advisory
- http://packetstormsecurity.com/files/151650/Raisecom-Technology-GPON-ONU-HT803G-07-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/Feb/34Exploit, Mailing List, Third Party Advisory
- http://www.breakthesec.com/search/label/0dayExploit, Third Party Advisory
- http://www.securityfocus.com/bid/107030Third Party Advisory, VDB Entry
- https://s3curityb3ast.github.ioThird Party Advisory
- https://s3curityb3ast.github.io/KSA-Dev-006.mdThird Party Advisory
- http://breakthesec.comThird Party Advisory
- http://packetstormsecurity.com/files/151650/Raisecom-Technology-GPON-ONU-HT803G-07-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/Feb/34Exploit, Mailing List, Third Party Advisory
- http://www.breakthesec.com/search/label/0dayExploit, Third Party Advisory
- http://www.securityfocus.com/bid/107030Third Party Advisory, VDB Entry
- https://s3curityb3ast.github.ioThird Party Advisory
- https://s3curityb3ast.github.io/KSA-Dev-006.mdThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.