Vulnerability CVE-2018-11518


Published: 2018-05-30

Description:
A vulnerability allows a phreaking attack on HCL legacy IVR systems that do not use VoIP. These IVR systems rely on various frequencies of audio signals; based on the frequency, certain commands and functions are processed. Since these frequencies are accepted within a phone call, an attacker can record these frequencies and use them for service activations. This is a request-forgery issue when the required series of DTMF signals for a service activation is predictable (e.g., the IVR system does not speak a nonce to the caller). In this case, the IVR system accepts an activation request from a less-secure channel (any loudspeaker in the caller's physical environment) without verifying that the request was intended (it matches a nonce sent over a more-secure channel to the caller's earpiece).

Type:

CWE-20

(Improper Input Validation)

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
6.4/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Hcltech -> Legacy ivr firmware 

 References:
http://virgil-cj.blogspot.com/2018/05/0day-legacy-ivr-lets-phreak.html
https://datarift.blogspot.com/2018/05/CVE-2018-11518-abusing-ivr-systems.html
https://twitter.com/mishradhiraj_/status/1001664204485652482
https://twitter.com/mishradhiraj_/status/1001664440759091207

Copyright 2024, cxsecurity.com

 

Back to Top