Teradek Slice 7.3.15 CSRF Change Password Vulnerability

Critical Vulnerability Information Vulnerability Title: Teradek Slice 7.3.15 CSRF Change Password Exploit Advisory ID: ZSL-2018-5467 Type: Local/Remote Impact: Cross-Site Scripting Risk: 3/5 Release Date: 21.05.2018 Overview The application interface allows users to perform certain actions via HTTP requests, but lacks validation checks to verify the legitimacy of the requests. If an authenticated user visits a malicious website, this can be exploited to perform certain actions with administrative privileges. Vendor Teradek, LLC - https://www.teradek.com Affected Versions Firmware Version: 7.3.15 (build 31735) Hardware Version: 2.1 Tested On lighttpd/1.4.48 lighttpd/1.4.31 Vendor Status 02.03.2018: Vulnerability discovered. 08.05.2018: Vendor contacted. 08.05.2018: Vendor requested more details. 08.05.2018: Detailed information sent to vendor. 10.05.2018: Follow-up inquiry sent to vendor for status update. 13.05.2018: No response received from vendor. 14.05.2018: Follow-up inquiry sent to vendor for status update. 20.05.2018: No response received from vendor. 21.05.2018: Public security advisory published. POC teradek_slice_csrf.html Acknowledgments Vulnerability discovered by Gjoko Krstic - gjoko@zeroscience.mk References 1. https://www.exploit-db.com/exploits/44676/ 2. https://exchange.xforce.ibmcloud.com/vulnerabilities/143726 3. https://packetstormsecurity.com/files/147795 4. https://cxsecurity.com/issue/WLB-2018050176

Goal Reached Thanks to every supporter — we hit 100%!

Teradek Slice 7.3.15 CSRF Change Password Vulnerability