cbcvebase.
CVE-2018-20220
published 2019-03-21

CVE-2018-20220: An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. While the web interface requires authentication before it can be interacted…

PriorityP263high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EXPLOIT
EPSS
15.36%
96.4th percentile
An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. While the web interface requires authentication before it can be interacted with, a large portion of the HTTP endpoints are missing authentication. An attacker is able to view these pages before being authenticated, and some of these pages may disclose sensitive information.

Affected

3 ranges
VendorProductVersion rangeFixed in
teracueenc-400_hdmi2_firmware<= 2.56—
teracueenc-400_hdmi_firmware<= 2.56—
teracueenc-400_hdsdi_firmware<= 2.56—

Detection & IOCsextracted from sources · hover to see the quote

path/configuration.xml↗
cookieAuthByPasswdENC400=Teracue:dGFpOfrtmR1bW1thrf5dGV4nhyxxdA==↗
path/usr/share/www/check.lp↗
  • →Detect unauthenticated HTTP GET requests to /configuration.xml on Teracue ENC-400 devices, which exposes stream IP, port, and encryption configuration without requiring authentication. ↗
  • →Detect HTTP requests carrying the hardcoded authentication cookie 'AuthByPasswdENC400' with value 'Teracue:dGFpOfrtmR1bW1thrf5dGV4nhyxxdA==' as an authentication bypass indicator. ↗
  • →Flag any HTTP request to the ENC-400 web interface that successfully accesses protected endpoints without a prior successful login sequence, indicating exploitation of missing authentication. ↗
  • ·Firmware v2.57 does not fully resolve the missing authentication issue; no verification was performed as to whether /configuration.xml or other unprotected files were remediated. ↗

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.