CVE-2019-15311

An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. The Zolo Halo Bluetooth speaker had a GoAhead web server listening on the port 80. The /httpapi.asp endpoint of the GoAhead web server was also vulnerable to multiple command execution vulnerabilities.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution/	Exploit Third Party Advisory
https://labs.mwrinfosecurity.com/advisories/	Third Party Advisory
https://linkplay.com/featured-products/	Product

Configurations

Configuration 1 (hide)

cpe:2.3:o:linkplay:linkplay:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-07-01 20:15

Updated : 2023-12-10 13:27

NVD link : CVE-2019-15311

Mitre link : CVE-2019-15311

CVE.ORG link : CVE-2019-15311

JSON object : View

Products Affected

linkplay

linkplay

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2019-15311", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2020-07-01T20:15:10.860", "references": [{"url": "https://labs.f-secure.com/advisories/linkplay-firmware-wanlan-remote-code-execution/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://labs.mwrinfosecurity.com/advisories/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://linkplay.com/featured-products/", "tags": ["Product"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. The Zolo Halo Bluetooth speaker had a GoAhead web server listening on the port 80. The /httpapi.asp endpoint of the GoAhead web server was also vulnerable to multiple command execution vulnerabilities."}, {"lang": "es", "value": "Se detect\u00f3 un problema en los dispositivos Zolo Halo por medio del firmware Linkplay. Se presenta una ejecuci\u00f3n de c\u00f3digo remota LAN de Zolo Halo. El altavoz Bluetooth Zolo Halo ten\u00eda un servidor web GoAhead escuchando en el puerto 80. El endpoint /httpapi.asp del servidor web GoAhead tambi\u00e9n era vulnerable a m\u00faltiples vulnerabilidades de ejecuci\u00f3n de comandos"}], "lastModified": "2021-07-21T11:39:23.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linkplay:linkplay:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61C9245A-2EEC-4F3D-96A7-3490561D9938"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}