CVE-2017-9333
Last modified
CVE-2017-9333 is a vulnerability of currently unknown severity. OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, when the URL refers to an attacker-controlled web site with a Trojan horse package. This has security implications in cases where untrusted users can trigger CallOPKG calls, and these users can enter an arbitrary URL in an input field, even though that input field was only intended for a package name. EPSS estimates a 2.27% chance of exploitation in the next 30 days.
Description
OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, when the URL refers to an attacker-controlled web site with a Trojan horse package. This has security implications in cases where untrusted users can trigger CallOPKG calls, and these users can enter an arbitrary URL in an input field, even though that input field was only intended for a package name. This threat model may be relevant in the latest versions of third-party products that bundle OpenWebif, i.e., set-top box products. The issue of Trojan horse packages does NOT have security implications in cases where the attacker has full OpenWebif access.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Openwebif Project | Openwebif | 1.2.5 |
References
- https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/619Issue Tracking, Patch, Third Party Advisory
- https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/621Issue Tracking, Patch, Third Party Advisory
- https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/619Issue Tracking, Patch, Third Party Advisory
- https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/621Issue Tracking, Patch, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-9333?
How severe is CVE-2017-9333?
How do I fix CVE-2017-9333?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-9326The keystore password for the Spark History Server may be ex…
- CVE-2017-9327Secret data of processes managed by CM is not secured by fil…
- CVE-2017-9328Shell metacharacter injection vulnerability in /usr/www/incl…
- CVE-2017-9330QEMU (aka Quick Emulator) before 2.9.0, when built with the …5.6
- CVE-2017-9331The Agenda component in Telaxus EPESI 1.8.2 and earlier has …
- CVE-2017-9332The smarty_self function in modules/module_smarty.php in Piv…
- CVE-2017-9334An incorrect "pair?" check in the Scheme "length" procedure …7.5
- CVE-2017-9336The WP Editor.MD plugin 1.6 for WordPress has a stored XSS v…
- CVE-2017-9337The Markdown on Save Improved plugin 2.5 for WordPress has a…
- CVE-2017-9338Inadequate escaping lead to XSS vulnerability in the search …5.4
- CVE-2017-9339A logical error in ownCloud Server before 10.0.2 caused disc…5.3
- CVE-2017-9340An attacker is logged in as a normal user and can somehow ma…6.5
Are you affected by CVE-2017-9333?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST