CVE-2021-31726 - OpenCVE

Akuvox C315 115.116.2613 allows remote command Injection via the cfgd_server service. The attack vector is sending a payload to port 189 (default root 0.0.0.0).

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:N/C:P/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Akuvox	C315 Firmware C315

Configuration 1 [-]

AND

cpe:2.3:o:akuvox:c315_firmware:115.116.2613:*:*:*:*:*:*:*

cpe:2.3:h:akuvox:c315:-:*:*:*:*:*:*:*

References

Link	Resource
https://pastebin.com/yv4ajFjD	Third Party Advisory
https://www.akuvox.com/ProductsDisp.aspx?pid=21	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2021-04-25T18:16:51

Updated: 2021-04-25T18:16:51

Reserved: 2021-04-23T00:00:00

Link: CVE-2021-31726

JSON object: View

NVD Information

Status : Analyzed

Published: 2021-04-25T19:15:08.137

Modified: 2021-05-06T20:33:37.857

Link: CVE-2021-31726

JSON object: View

Redhat Information

No data.

CWE

CWE-77

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:akuvox:c315_firmware:115.116.2613:*:*:*:*:*:*:*", "matchCriteriaId": "879DDC0F-76A3-4B03-BE4D-06039A269D46", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:akuvox:c315:-:*:*:*:*:*:*:*", "matchCriteriaId": "543A89AF-D579-477D-B2C1-4219D21A9366", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Akuvox C315 115.116.2613 allows remote command Injection via the cfgd_server service. The attack vector is sending a payload to port 189 (default root 0.0.0.0)."}, {"lang": "es", "value": "Akuvox versi\u00f3n C315 115.116.2613, permite una inyecci\u00f3n de comandos remota por medio del servicio cfgd_server. El vector de ataque env\u00eda una carga \u00fatil al puerto 189 (root predeterminada 0.0.0.0)"}], "id": "CVE-2021-31726", "lastModified": "2021-05-06T20:33:37.857", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-04-25T19:15:08.137", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://pastebin.com/yv4ajFjD"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.akuvox.com/ProductsDisp.aspx?pid=21"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}]}