CVE-2017-7649 Auth bypass in Eclipse Kura Installer

Critical 9.8 Published 11 Sep 2017 Updated 16 Sep 2024

Attackers can bypass authentication via an open telnet port to execute commands as root, gaining full control of the IoT device.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2017-7649?

CVE-2017-7649 is a critical authentication bypass vulnerability in Eclipse Kura Installer, published on 11 Sep 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured. Still the Equinox console port 5002 is left open, allowing to log into Kura without any user credentials over unencrypted telnet and executing commands using the Equinox "exec" command. As the process is running as "root" full control over the device can be acquired. IPv6 is also left in auto-configuration mode, accepting router advertisements automatically and assigns a MAC address based IPv6 address.

Weakness: CWE-287

Which versions are affected by CVE-2017-7649?

It affects 1 product.

Products include Eclipse Kura.

How do I fix CVE-2017-7649?

No fix has been published for CVE-2017-7649 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2017-7649 being exploited?

There is no known exploitation of CVE-2017-7649 in the wild and no public exploit code.

Sources

Also known as GHSA-wqfv-xx2r-h6v5.