0x1 CVE-2018-13858

Discoverer

VULNC0D3 ( @herwonowr )


CVE ID

CVE-2018-13858


Description

MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional, allows unauthorized remote attackers to reboot or execute other functions via “/xml/system/control.xml” URL, using GET request “?action=reboot” for example.


Vulnerability Type

Code Execution


Vendor of Product

Trivum

– Vendor Homepage : http://trivum.com

– Software Link : https://world.trivum-shop.de


Affected Product Code Base

V8.76 - SNR 8604.26 - C4 Professional


Affected Component

System control


Attack Type

Remote


Impact Code execution

True


Attack Vectors

Remote


Timeline

– 2018-07-10 : Request CVE ID

– 2018-07-11 : CVE ID Assigned

– 2018-07-11 : Contacting Vendor

– 2018-07-12 : Vendor Respond

Vendor refuse to fix the issue:
“Restart capabilities are highly important for customers, to get the system to a defined starting point in case of problems. So far no customer reported unwanted restarts, and we fear to render the system unusable if we restrict too much.”

– 2018-07-14 : Request for Publication

– 2018-07-18 : CVE ID Public Release