CVE-2017-6047

Vulnerability

Detcon SiteWatch Gateway (all versions without cellular) stores user passwords in plaintext in a file that is accessible without authentication [1]. This is a combination of improper authentication and plaintext storage of a password. The cellular versions are not affected [1].

Exploitation

An attacker with network access to the gateway can read the plaintext password file without any authentication [1]. The advisory notes low skill level to exploit and remote exploitability [1]. No user interaction is required.

Impact

Successful exploitation allows an attacker to obtain user passwords and change device settings. The advisory states that remote code execution may be possible [1]. The attacker gains the ability to compromise the gateway and potentially pivot to other systems.

Mitigation

Detcon no longer sells or maintains the SiteWatch Gateway product; no patch is available [1]. Users should minimize network exposure, isolate the device behind firewalls, and use secure remote access methods such as VPNs [1]. The product is end-of-life.