CVE-2020-23591

Vulnerability

The vulnerability exists in OPTILINK OP-XT71000N with Hardware Version V2.2 and Firmware Version OP_V3.3.1-191028. The endpoint /mgm_dev_upgrade.asp does not properly validate file uploads, allowing an attacker to upload arbitrary files, including malicious scripts. [1]

Exploitation

An attacker can upload a file via the /mgm_dev_upgrade.asp endpoint without authentication. The uploaded file can be a .asp webshell for remote code execution, or a file that triggers the execution of rm -rf *.* to delete all files on the device, causing denial of service. [1]

Impact

Successful exploitation allows an attacker to achieve arbitrary file deletion leading to denial of service, or upload a webshell for reverse connection and backdoor access, potentially leading to privilege escalation and full compromise of the device. [1]

Mitigation

As of the publication date, no official patch has been released. Users should consider upgrading to a newer firmware version if available, or restrict access to the management interface to trusted networks. The device may be end-of-life; contact OPTILINK for support. [1]