CVE-2017-5168 Path traversal in Hanwha Techwin Smart Security Manager Versions 1.5 and prior
Attacker can read arbitrary files and execute code via path traversal in ActiveMQ Broker when user visits malicious page.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2017-5168?
CVE-2017-5168 is a high-severity path traversal vulnerability in Hanwha Techwin Smart Security Manager Versions 1.5 and prior, published on 13 Feb 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Path Traversal vulnerabilities have been identified. The flaws exist within the ActiveMQ Broker service that is installed as part of the product. By issuing specific HTTP requests, if a user visits a malicious page, an attacker can gain access to arbitrary files on the server. Smart Security Manager Versions 1.4 and prior to 1.31 are affected by these vulnerabilities. These vulnerabilities can allow for remote code execution.
Weakness: CWE-22
Which versions are affected by CVE-2017-5168?
It affects 1 product.
Products include Hanwha-Security Smart Security Manager.
How do I fix CVE-2017-5168?
No fix has been published for CVE-2017-5168 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2017-5168 being exploited?
There is no known exploitation of CVE-2017-5168 in the wild and no public exploit code.
Other vulnerabilities in Hanwha Techwin Smart Security Manager Versions 1.5 and prior
Sources
Also known as GHSA-f2vj-8mcp-f563.