CVE-2020-12148 OS Command Injection - nslookup API

Medium 6.8 Published 11 Dec 2020 Updated 16 Sep 2024

Authenticated attackers can execute arbitrary commands via the nslookup API in Silver Peak ECOS, potentially taking full control of the appliance.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2020-12148?

CVE-2020-12148 is a medium-severity command injection vulnerability in Silver Peak Systems, Inc. ECOS, published on 11 Dec 2020. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.

Official description

A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privileges of the web server running on the EdgeConnect appliance. An attacker could exploit this vulnerability to establish an interactive channel, effectively taking control of the target system. This vulnerability can be exploited by an attacker with authenticated access to the Orchestrator UI or EdgeConnect UI. This affects all ECOS versions prior to : 8.1.9.15, 8.3.0.8, 8.3.1.2, 8.3.2.0, 9.0.2.0, and 9.1.0.0.

Weakness: CWE-78

Which versions are affected by CVE-2020-12148?

It affects 1 product.

Products include Arubanetworks Edgeconnect Enterprise.

How do I fix CVE-2020-12148?

No fix has been published for CVE-2020-12148 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2020-12148 being exploited?

There is no known exploitation of CVE-2020-12148 in the wild and no public exploit code.

Sources

Also known as GHSA-r63f-xx72-hrcw.