Detections
Analytics
Dell UPnP SUBSCRIBE function Incorrect Default Permissions (CVE-2020-12695)
high Tenable OT Security Plugin ID 502695
Synopsis
The remote OT asset is affected by a vulnerability.Description
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://www.kb.cert.org/vuls/id/339275
https://github.com/yunuscadirci/CallStranger
https://github.com/corelight/callstranger-detector
https://lists.debian.org/debian-lts-announce/2020/08/msg00011.html
https://lists.debian.org/debian-lts-announce/2020/08/msg00013.html
https://usn.ubuntu.com/4494-1/
https://www.debian.org/security/2020/dsa-4806
https://lists.debian.org/debian-lts-announce/2020/12/msg00017.html
https://www.debian.org/security/2021/dsa-4898
http://www.openwall.com/lists/oss-security/2020/06/08/2
http://www.nessus.org/u?0c042cd5
http://www.nessus.org/u?ea3b09f9
http://www.nessus.org/u?295dd500
http://www.nessus.org/u?bf195f28
Plugin Details
Severity: High
ID: 502695
Version: 1.2
Type: remote
Family: Tenable.ot
Published: 11/29/2024
Updated: 11/29/2024
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: High
Score: 7.8
CVSS v2
Risk Factor: High
Base Score: 7.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:C
CVSS Score Source: CVE-2020-12695
CVSS v3
Risk Factor: High
Base Score: 7.5
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H
Vulnerability Information
CPE: cpe:/h:dell:b1165nfw:-
Required KB Items: Tenable.ot/Dell
Exploit Ease: No known exploits are available
Patch Publication Date: 6/8/2020
Vulnerability Publication Date: 6/8/2020
Reference Information
CVE: CVE-2020-12695
CWE: 276