CVE-2019-15051 - Vulnerability Details - OpenCVE

An issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225. A CGI script is vulnerable to command injection via a maliciously crafted form parameter.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Softing	Uagate 840d Uagate 840d Firmware Uagate Mb Uagate Mb Firmware Uagate Si Uagate Si Firmware

Configuration 1 [-]

AND

cpe:2.3:o:softing:uagate_si_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:softing:uagate_si:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:softing:uagate_mb_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:softing:uagate_mb:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:softing:uagate_840d_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:softing:uagate_840d:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://security.mioso.com/CVE-2019-15051-en.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-10-10T19:12:31

Updated: 2024-08-05T00:34:53.342Z

Reserved: 2019-08-14T00:00:00

Link: CVE-2019-15051

Vulnrichment

No data.

NVD

Status : Modified

Published: 2019-10-10T20:15:11.147

Modified: 2024-11-21T04:27:57.480

Link: CVE-2019-15051

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:softing:uagate_si_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "125F8C5A-287D-4BDD-B65F-644DA57BDCDD", "versionEndIncluding": "1.71.00.1225", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:softing:uagate_si:-:*:*:*:*:*:*:*", "matchCriteriaId": "0B5362A6-7F78-4892-8579-12FC284F6F61", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:softing:uagate_mb_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "38B70D5C-3987-46C5-BA5D-20652EA8D73B", "versionEndIncluding": "1.71.00.1225", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:softing:uagate_mb:-:*:*:*:*:*:*:*", "matchCriteriaId": "B716207F-2580-4AA9-8FAF-F23A88979271", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:softing:uagate_840d_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "50733AD6-872D-4898-AD8D-4FC7962AE17A", "versionEndIncluding": "1.71.00.1225", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:softing:uagate_840d:-:*:*:*:*:*:*:*", "matchCriteriaId": "F6D11C38-A2F0-4D6C-ADF9-207C50F1C802", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225. A CGI script is vulnerable to command injection via a maliciously crafted form parameter."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Softing uaGate (SI, MB, 840D) versi\u00f3n firmware hasta 1.71.00.1225. Un script CGI es vulnerable a la inyecci\u00f3n de comandos por medio de un par\u00e1metro form maliciosamente creado."}], "id": "CVE-2019-15051", "lastModified": "2024-11-21T04:27:57.480", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-10-10T20:15:11.147", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://security.mioso.com/CVE-2019-15051-en.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://security.mioso.com/CVE-2019-15051-en.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}]}