CVE-2016-9796 Auth bypass in n/a
Attackers can bypass authentication on OmniVista 8770 to execute arbitrary commands with SYSTEM privileges via exposed ORB interfaces.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-9796?
CVE-2016-9796 is a critical authentication bypass vulnerability in n/a, published on 3 Dec 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods (AddJobSet, AddJob, and ExecuteNow) that can be used to run arbitrary commands on the server, with the privilege of NT AUTHORITY\SYSTEM on the server. NOTE: The discoverer states "The vendor position is to refer to the technical guidelines of the product security deployment to mitigate this issue, which means applying proper firewall rules to prevent unauthorised clients to connect to the OmniVista server."
Which versions are affected by CVE-2016-9796?
It affects 1 product.
Products include Alcatel-Lucent Omnivista 8770 Network Management System.
How do I fix CVE-2016-9796?
No fix has been published for CVE-2016-9796 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2016-9796 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2016-9796 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-r92c-mm8f-fhhm.