vendor:
HG532n
by:
Ahmed S. Darwish
7.5
CVSS
HIGH
Command Injection
78
CWE
Product Name: HG532n
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE: h:huawei:hg532n
Platforms Tested: Linux
2017
Huawei HG532n Command Injection
This module exploits a command injection vulnerability in the Huawei HG532n routers provided by TE-Data Egypt, leading to a root shell. The router's web interface has two kinds of logins, a 'limited' user:user login given to all customers and an admin mode. The limited mode is used here to expose the router's telnet port to the outside world through NAT port-forwarding. With telnet now remotely accessible, the router's limited 'ATP command line tool' (served over telnet) can be upgraded to a root shell through an injection into the ATP's hidden 'ping' command.
Mitigation:
Update the firmware of the Huawei HG532n router to the latest version to patch the command injection vulnerability.