CVE-2017-11579

Vulnerability

The Blipcare Wireless Blood Pressure Monitor running the most recent firmware (version not specified in the references) exposes an open Wi-Fi network named "Blip" for initial device setup. The user connects to this unencrypted network to access the web management interface, where the device prompts for the user's home Wi-Fi credentials to enable internet connectivity. The credentials are transmitted without encryption, and the device serves HTTP pages that can be modified by an attacker on the same open network [1].

Exploitation

An attacker within wireless range of the Blipcare device can either sniff the open Wi-Fi network traffic to capture the plaintext credentials as they are sent, or connect directly to the "Blip" network and perform man-in-the-middle (MITM) attacks. The attacker can modify the HTTP responses served by the device's web interface, for example injecting links or prompts that trick the user into downloading and executing a malicious binary [1].

Impact

Successful exploitation leads to disclosure of the user's home Wi-Fi network credentials (confidentiality breach) and can enable further device compromise. By serving modified HTTP content, the attacker may also achieve malicious code execution on the user's computer or mobile device, potentially leading to full system compromise or malware infection [1].

Mitigation

As of the references, the vendor (Blipcare) has not released a firmware update addressing this issue. Mitigations are not disclosed in the available references. Users should avoid using the device on untrusted networks and consider replacing it with a product that implements encrypted communications [1].