Sign-up

ID

VAR-201812-0670


CVE

CVE-2018-20377


TITLE

Orange Livebox Vulnerable to cross-site request forgery

Trust: 1.6

sources: JVNDB: JVNDB-2018-013637 // JVNDB: JVNDB-2018-013687

DESCRIPTION

Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /get_getnetworkconf.cgi on port 8080, leading to full control if the admin password equals the Wi-Fi password or has the default admin value. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2. Orange Livebox Contains vulnerabilities related to certificate and password management.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Orange Livebox Contains an input validation vulnerability.Information may be tampered with. The Orange Livebox is an ADSL (Asymmetric Digital Subscriber Line) modem. A security vulnerability exists in Orange Livebox version 00.96.320S. A remote attacker could exploit this vulnerability by sending a GET request to the /get_getnetworkconf.cgi URI to obtain the device's SSID and WI-FI password

Trust: 3.96

sources: NVD: CVE-2018-20377 // JVNDB: JVNDB-2018-011738 // JVNDB: JVNDB-2018-013637 // JVNDB: JVNDB-2018-013687 // JVNDB: JVNDB-2018-013686 // VULHUB: VHN-131177 // VULMON: CVE-2018-20377

AFFECTED PRODUCTS

vendor:orangemodel:liveboxscope: - version: -

Trust: 2.4

vendor:orangemodel:arv7519rw22 livebox 2.1scope:eqversion:00.96.321s

Trust: 1.6

vendor:orangemodel:arv7519rw22 livebox 2.1scope:eqversion:00.96.00.96.613

Trust: 1.6

vendor:orangemodel:arv7519rw22 livebox 2.1scope:eqversion:00.96.00.96.609es

Trust: 1.6

vendor:orangemodel:arv7519rw22 livebox 2.1scope:eqversion:00.96.217

Trust: 1.6

vendor:orangemodel:liveboxscope:eqversion:00.96.320s

Trust: 0.8

sources: JVNDB: JVNDB-2018-011738 // JVNDB: JVNDB-2018-013637 // JVNDB: JVNDB-2018-013687 // JVNDB: JVNDB-2018-013686 // CNNVD: CNNVD-201812-1036 // NVD: CVE-2018-20377

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2018-20377
value: CRITICAL

Trust: 1.6

nvd@nist.gov: CVE-2018-20377
value: CRITICAL

Trust: 1.0

NVD: CVE-2018-20377
value: MEDIUM

Trust: 0.8

NVD: CVE-2018-20377
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201812-1036
value: CRITICAL

Trust: 0.6

VULHUB: VHN-131177
value: HIGH

Trust: 0.1

VULMON: CVE-2018-20377
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2018-20377
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

NVD: CVE-2018-20377
severity: HIGH
baseScore: 9.4
vectorString: AV:N/AC:L/AU:N/C:N/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

NVD: CVE-2018-20377
severity: MEDIUM
baseScore: 5.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

NVD: CVE-2018-20377
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

VULHUB: VHN-131177
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2018-20377
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.0

Trust: 1.8

NVD: CVE-2018-20377
baseSeverity: CRITICAL
baseScore: 9.1
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

NVD: CVE-2018-20377
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

NVD: CVE-2018-20377
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-131177 // VULMON: CVE-2018-20377 // JVNDB: JVNDB-2018-011738 // JVNDB: JVNDB-2018-013637 // JVNDB: JVNDB-2018-013687 // JVNDB: JVNDB-2018-013686 // CNNVD: CNNVD-201812-1036 // NVD: CVE-2018-20377

PROBLEMTYPE DATA

problemtype:CWE-352

Trust: 1.6

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:CWE-255

Trust: 0.8

problemtype:CWE-20

Trust: 0.8

sources: JVNDB: JVNDB-2018-011738 // JVNDB: JVNDB-2018-013637 // JVNDB: JVNDB-2018-013687 // JVNDB: JVNDB-2018-013686 // NVD: CVE-2018-20377

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201812-1036

TYPE

trust management problem

Trust: 0.6

sources: CNNVD: CNNVD-201812-1036

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-011738

PATCH
title:Top Pageurl:https://www.orange.com/en/home
Trust: 2.4
title:Top Pageurl:https://www.orange.fr/portail
Trust: 0.8
title:LIVEBOX-0DAYurl:https://github.com/zadewg/LIVEBOX-0DAY 
Trust: 0.1
title:Threatposturl:https://threatpost.com/19k-orange-livebox-modems-open-to-attack/140376/
Trust: 0.1
sources:
            
            
            VULMON: CVE-2018-20377 // 
            
            
            
            JVNDB: JVNDB-2018-011738 // 
            
            
            
            JVNDB: JVNDB-2018-013637 // 
            
            
            
            JVNDB: JVNDB-2018-013687 // 
            
            
            
            JVNDB: JVNDB-2018-013686

EXTERNAL IDS
db:NVDid:CVE-2018-20377
Trust: 5.0
db:JVNDBid:JVNDB-2018-011738
Trust: 0.8
db:JVNDBid:JVNDB-2018-013637
Trust: 0.8
db:JVNDBid:JVNDB-2018-013687
Trust: 0.8
db:JVNDBid:JVNDB-2018-013686
Trust: 0.8
db:CNNVDid:CNNVD-201812-1036
Trust: 0.7
db:VULHUBid:VHN-131177
Trust: 0.1
db:VULMONid:CVE-2018-20377
Trust: 0.1
sources:
            
            
            VULHUB: VHN-131177 // 
            
            
            
            VULMON: CVE-2018-20377 // 
            
            
            
            JVNDB: JVNDB-2018-011738 // 
            
            
            
            JVNDB: JVNDB-2018-013637 // 
            
            
            
            JVNDB: JVNDB-2018-013687 // 
            
            
            
            JVNDB: JVNDB-2018-013686 // 
            
            
            
            CNNVD: CNNVD-201812-1036 // 
            
            
            
            NVD: CVE-2018-20377

REFERENCES
url:https://github.com/zadewg/livebox-0day
Trust: 5.0
url:https://badpackets.net/over-19000-orange-livebox-adsl-modems-are-leaking-their-wifi-credentials/
Trust: 1.8
url:https://news.ycombinator.com/item?id=18745533
Trust: 1.8
url:https://web.archive.org/web/20181223120225/https://badpackets.net/over-19000-orange-livebox-adsl-modems-are-leaking-their-wifi-credentials/
Trust: 1.2
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-20377
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-20377
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-20577
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-20577
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-20576
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-20576
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-20575
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-20575
Trust: 0.8
url:https://web.archive.org/web/20181223120225/
Trust: 0.6
url:https://cwe.mitre.org/data/definitions/.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:https://threatpost.com/19k-orange-livebox-modems-open-to-attack/140376/
Trust: 0.1
sources:
            
            
            VULHUB: VHN-131177 // 
            
            
            
            VULMON: CVE-2018-20377 // 
            
            
            
            JVNDB: JVNDB-2018-011738 // 
            
            
            
            JVNDB: JVNDB-2018-013637 // 
            
            
            
            JVNDB: JVNDB-2018-013687 // 
            
            
            
            JVNDB: JVNDB-2018-013686 // 
            
            
            
            CNNVD: CNNVD-201812-1036 // 
            
            
            
            NVD: CVE-2018-20377

SOURCES
db:VULHUBid:VHN-131177
db:VULMONid:CVE-2018-20377
db:JVNDBid:JVNDB-2018-011738
db:JVNDBid:JVNDB-2018-013637
db:JVNDBid:JVNDB-2018-013687
db:JVNDBid:JVNDB-2018-013686
db:CNNVDid:CNNVD-201812-1036
db:NVDid:CVE-2018-20377

LAST UPDATE DATE
2024-11-23T21:52:36.761000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-131177date:2019-10-03T00:00:00
db:VULMONid:CVE-2018-20377date:2019-10-03T00:00:00
db:JVNDBid:JVNDB-2018-011738date:2019-01-21T00:00:00
db:JVNDBid:JVNDB-2018-013637date:2019-02-27T00:00:00
db:JVNDBid:JVNDB-2018-013687date:2019-02-28T00:00:00
db:JVNDBid:JVNDB-2018-013686date:2019-02-28T00:00:00
db:CNNVDid:CNNVD-201812-1036date:2019-10-23T00:00:00
db:NVDid:CVE-2018-20377date:2024-11-21T04:01:21.403

SOURCES RELEASE DATE
db:VULHUBid:VHN-131177date:2018-12-23T00:00:00
db:VULMONid:CVE-2018-20377date:2018-12-23T00:00:00
db:JVNDBid:JVNDB-2018-011738date:2019-01-21T00:00:00
db:JVNDBid:JVNDB-2018-013637date:2019-02-27T00:00:00
db:JVNDBid:JVNDB-2018-013687date:2019-02-28T00:00:00
db:JVNDBid:JVNDB-2018-013686date:2019-02-28T00:00:00
db:CNNVDid:CNNVD-201812-1036date:2018-12-24T00:00:00
db:NVDid:CVE-2018-20377date:2018-12-23T18:29:00.527