CVE-2018-12257 Security feature bypass in n/a

Medium 4.4 Published 12 Jun 2018 Updated 17 Sep 2024

Authenticated root users can bypass SSL validation to install malicious firmware via DNS hijacking, leading to remote code execution.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-12257?

CVE-2018-12257 is a medium-severity vulnerability in n/a, published on 12 Jun 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hijacking. An authenticated root user with CLI access is able to remotely upgrade firmware to a custom image due to lack of SSL validation by changing the nameservers in /etc/resolv.conf to the attacker's server, and serving the expected HTTPS response containing new firmware for the device to download.

Weakness: CWE-295

Which versions are affected by CVE-2018-12257?

It affects 1 product.

Products include Apollotechnologiesinc Momentum Axel 720p Firmware.

How do I fix CVE-2018-12257?

No fix has been published for CVE-2018-12257 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-12257 being exploited?

There is no known exploitation of CVE-2018-12257 in the wild and no public exploit code.

Sources

Also known as GHSA-6222-ghhf-xmx8.