← Advisories

Newtec Satellite Modem MDM6000 2.2.5 Cross-Site Scripting Vulnerability

Medium
Advisory ID
ZSL-2016-5359
Release Date
21 August 2016
Vendor
Newtec Cy N.V. - http://www.newtec.eu
Affected Version
2.2.5.67852, 2.2.4.64193, 1.3.8.56435
CVE
N/A
Tested On
lighttpd/1.4.28
Summary

The MDM6000 modem is typically installed at both ends of a point-to-point satellite link or at the remote sites of a star network. The unit can work as a modulator, demodulator or modem depending on the network configuration and integrates seamlessly with terrestrial IP networks and equipment. The modem is in full compliance with the DVB-S2 and DVB-S2X standards to achieve barrier-breaking efficiency at maximum service availability.

Description

Newtec Satellite Modem MDM6000 suffers from multiple reflected cross-site scripting vulnerabilities when input passed via several parameters to several scripts is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Proof of Concept
Disclosure Timeline
20.06.2016Vulnerability discovered.
20.06.2016Vendor contacted.
20.06.2016Vendor replies asking more details.
24.06.2016Sent details to vendor.
29.06.2016Working with the vendor.
08.07.2016Asked vendor for status update.
08.08.2016No reply from the vendor.
21.08.2016Public security advisory released.
Credits
Vulnerability discovered by Gjoko Krstic
References
Changelog
21.08.2016Initial release
31.08.2016Added reference [2], [3] and [4]