← Advisories

Teradek Slice 7.3.15 (snapshot.cgi) Stream Disclosure

Medium
Advisory ID
ZSL-2018-5466
Release Date
21 May 2018
Vendor
Teradek, LLC - https://www.teradek.com
Affected Version
Firmware Version:7.3.15 (build 31735), Hardware Version: 2.1
CVE
N/A
Tested On
lighttpd/1.4.48, lighttpd/1.4.31
Summary

Built on the award-winning Cube platform, Slice is a rack mount HEVC / H.264 codec designed to fit seamlessly into your broadcast studio. Like the Cube, Slice encoders and decoders includes 3G-SDI and HDMI I/O, Ethernet and WiFi connectivity, and full duplex IFB.

Description

Slice suffers from an unauthenticated and unauthorized live stream disclosure when snapshot.cgi script is called.

Proof of Concept
teradek_slice_stream.txtTXT
Disclosure Timeline
02.03.2018Vulnerability discovered.
08.05.2018Vendor contacted.
08.05.2018Vendor replied asking more details.
08.05.2018Sent details to the vendor.
10.05.2018Asked vendor for status update.
13.05.2018No response from the vendor.
14.05.2018Asked vendor for status update.
20.05.2018No response from the vendor.
21.05.2018Public security advisory released.
Credits
Vulnerability discovered by Gjoko Krstic
References
[1]https://packetstormsecurity.com/files/147794
[2]https://cxsecurity.com/issue/WLB-2018050175
[3]https://exchange.xforce.ibmcloud.com/vulnerabilities/143722
Changelog
21.05.2018Initial release
29.05.2018Added reference [1], [2] and [3]