CVE-2017-17867
Last modified
CVE-2017-17867 is a vulnerability of currently unknown severity. Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed because the /etc/uci-defaults directory was not being used to secure the OpenWrt configuration.. EPSS estimates a 11.07% chance of exploitation in the next 30 days.
Description
Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field in the odhcpd configuration to specify an arbitrary program, as demonstrated by a program located on an SMB share. This issue existed because the /etc/uci-defaults directory was not being used to secure the OpenWrt configuration.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intenogroup | Iopsys | >= 2.0, <= 3.14 |
| Intenogroup | Iopsys | 4.0 |
References
- https://neonsea.uk/blog/2017/12/23/rce-inteno-iopsys.htmlExploit, Technical Description, Third Party Advisory
- https://www.exploit-db.com/exploits/43428/Exploit, Third Party Advisory, VDB Entry
- https://neonsea.uk/blog/2017/12/23/rce-inteno-iopsys.htmlExploit, Technical Description, Third Party Advisory
- https://www.exploit-db.com/exploits/43428/Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-17867?
How severe is CVE-2017-17867?
How do I fix CVE-2017-17867?
Are you affected by CVE-2017-17867?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST