Sign-up

ID

VAR-201710-0916


CVE

CVE-2017-11322


TITLE

UCOPIA Wireless Appliance Vulnerabilities related to authorization, permissions, and access control

Trust: 0.8

sources: JVNDB: JVNDB-2017-008960

DESCRIPTION

The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign ($) metacharacter in the argument to chroothole_client. UCOPIA Wireless Appliance Contains vulnerabilities related to authorization, permissions, and access control.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. UCOPIAWirelessAppliance is a wireless device from UCOPIA, France. A security vulnerability exists in the chroothole_client executable file in versions prior to UCOPIAWirelessAppliance 5.1.8

Trust: 2.34

sources: NVD: CVE-2017-11322 // JVNDB: JVNDB-2017-008960 // CNVD: CNVD-2018-11244 // VULHUB: VHN-101733 // VULMON: CVE-2017-11322

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2018-11244

AFFECTED PRODUCTS

vendor:ucopiamodel:wireless appliancescope:ltversion:5.1.8

Trust: 1.4

vendor:ucopiamodel:wireless appliancescope:lteversion:5.1.7

Trust: 1.0

vendor:ucopiamodel:wireless appliancescope:eqversion:5.1.7

Trust: 0.6

sources: CNVD: CNVD-2018-11244 // JVNDB: JVNDB-2017-008960 // CNNVD: CNNVD-201707-640 // NVD: CVE-2017-11322

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2017-11322
value: HIGH

Trust: 1.0

NVD: CVE-2017-11322
value: HIGH

Trust: 0.8

CNVD: CNVD-2018-11244
value: HIGH

Trust: 0.6

CNNVD: CNNVD-201707-640
value: HIGH

Trust: 0.6

VULHUB: VHN-101733
value: HIGH

Trust: 0.1

VULMON: CVE-2017-11322
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2017-11322
severity: HIGH
baseScore: 7.2
vectorString: AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

CNVD: CNVD-2018-11244
severity: HIGH
baseScore: 7.2
vectorString: AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-101733
severity: HIGH
baseScore: 7.2
vectorString: AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2017-11322
baseSeverity: HIGH
baseScore: 8.2
vectorString: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.5
impactScore: 6.0
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2018-11244 // VULHUB: VHN-101733 // VULMON: CVE-2017-11322 // JVNDB: JVNDB-2017-008960 // CNNVD: CNNVD-201707-640 // NVD: CVE-2017-11322

PROBLEMTYPE DATA

problemtype:CWE-78

Trust: 1.1

problemtype:CWE-264

Trust: 0.9

sources: VULHUB: VHN-101733 // JVNDB: JVNDB-2017-008960 // NVD: CVE-2017-11322

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201707-640

TYPE

operating system commend injection

Trust: 0.6

sources: CNNVD: CNNVD-201707-640

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2017-008960

EXPLOIT AVAILABILITY
sources:
            
            
            VULHUB: VHN-101733 // 
            
            
            
            VULMON: CVE-2017-11322

PATCH
title:Top Pageurl:http://www.ucopia.com/en/
Trust: 0.8
title:UCOPIAWirelessAppliance privilege escalation vulnerability patchurl:https://www.cnvd.org.cn/patchInfo/show/131607
Trust: 0.6
title:UCOPIA Wireless Appliance Fixes for permission permissions and access control vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=99933
Trust: 0.6
title:CVEsurl:https://github.com/tnpitsecurity/CVEs 
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2018-11244 // 
            
            
            
            VULMON: CVE-2017-11322 // 
            
            
            
            JVNDB: JVNDB-2017-008960 // 
            
            
            
            CNNVD: CNNVD-201707-640

EXTERNAL IDS
db:NVDid:CVE-2017-11322
Trust: 3.2
db:EXPLOIT-DBid:42936
Trust: 2.4
db:JVNDBid:JVNDB-2017-008960
Trust: 0.8
db:CNNVDid:CNNVD-201707-640
Trust: 0.7
db:EXPLOITDBid:42936
Trust: 0.6
db:CNVDid:CNVD-2018-11244
Trust: 0.6
db:PACKETSTORMid:144414
Trust: 0.1
db:VULHUBid:VHN-101733
Trust: 0.1
db:VULMONid:CVE-2017-11322
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2018-11244 // 
            
            
            
            VULHUB: VHN-101733 // 
            
            
            
            VULMON: CVE-2017-11322 // 
            
            
            
            JVNDB: JVNDB-2017-008960 // 
            
            
            
            CNNVD: CNNVD-201707-640 // 
            
            
            
            NVD: CVE-2017-11322

REFERENCES
url:https://sysdream.com/news/lab/2017-09-29-cve-2017-11322-ucopia-wireless-appliance-5-1-8-privileges-escalation/
Trust: 2.6
url:https://www.exploit-db.com/exploits/42936/
Trust: 2.5
url:https://nvd.nist.gov/vuln/detail/cve-2017-11322
Trust: 1.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-11322
Trust: 0.8
url:https://cwe.mitre.org/data/definitions/78.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2018-11244 // 
            
            
            
            VULHUB: VHN-101733 // 
            
            
            
            VULMON: CVE-2017-11322 // 
            
            
            
            JVNDB: JVNDB-2017-008960 // 
            
            
            
            CNNVD: CNNVD-201707-640 // 
            
            
            
            NVD: CVE-2017-11322

SOURCES
db:CNVDid:CNVD-2018-11244
db:VULHUBid:VHN-101733
db:VULMONid:CVE-2017-11322
db:JVNDBid:JVNDB-2017-008960
db:CNNVDid:CNNVD-201707-640
db:NVDid:CVE-2017-11322

LAST UPDATE DATE
2025-04-20T23:12:51.559000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2018-11244date:2018-06-12T00:00:00
db:VULHUBid:VHN-101733date:2019-10-03T00:00:00
db:VULMONid:CVE-2017-11322date:2019-10-03T00:00:00
db:JVNDBid:JVNDB-2017-008960date:2017-10-31T00:00:00
db:CNNVDid:CNNVD-201707-640date:2019-10-23T00:00:00
db:NVDid:CVE-2017-11322date:2025-04-20T01:37:25.860

SOURCES RELEASE DATE
db:CNVDid:CNVD-2018-11244date:2018-06-11T00:00:00
db:VULHUBid:VHN-101733date:2017-10-03T00:00:00
db:VULMONid:CVE-2017-11322date:2017-10-03T00:00:00
db:JVNDBid:JVNDB-2017-008960date:2017-10-31T00:00:00
db:CNNVDid:CNNVD-201707-640date:2017-07-17T00:00:00
db:NVDid:CVE-2017-11322date:2017-10-03T01:29:01.043