CVE-2024-24578: jens-maus RaspberryMatic, заобикаляне на вход и права

Описание

Оригинално описание

RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior to version 3.75.6.20240316 contains a unauthenticated remote code execution (RCE) vulnerability, caused by multiple issues within the Java based `HMIPServer.jar` component. RaspberryMatric includes a Java based `HMIPServer`, that can be accessed through URLs starting with `/pages/jpages`. The `FirmwareController` class does however not perform any session id checks, thus this feature can be accessed without a valid session. Due to this issue, attackers can gain remote code execution as root user, allowing a full system compromise. Version 3.75.6.20240316 contains a patch.

Засегнати продукти

• jens-maus RaspberryMatic: < 3.75.6.20240316
• raspberrymatic raspberrymatic: преди 3.75.6.20240316

Вид слабост

• CWE-23 Обхождане на директории чрез относителен път
• CWE-306 Липсваща автентикация за критична функционалност

История

Други уязвимости в jens-maus RaspberryMatic

• 10.0CVE-2022-24796

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-24578
• https://nvd.nist.gov/vuln/detail/CVE-2024-24578
• https://github.com/jens-maus/RaspberryMatic/security/advisories/GHSA-q967-q4j8-637h