Path Traversal in DT42 BerryNet via Model Metadata Handler

Executive Summary

This is a path traversal vulnerability in DT42 BerryNet up to version 3.10.2. It exists in the function DLModelManager.get_model_meta in berrynet/dlmodelmgr.py. The issue occurs when the label field in a model package's meta.json is manipulated to use an absolute path. The function joins this path to the package directory without validation, allowing an attacker to read arbitrary files outside the intended directory. This happens because os.path.join() discards preceding components when the final component is an absolute path.

Useful 0 Not Useful 0

Detection Guidance

Check BerryNet logs for suspicious model package paths, particularly absolute paths in meta.json files. Use commands like 'grep -r "meta.json" /path/to/berrynet/' to inspect model metadata. Monitor engine services (bn_tflite, bn_darknet, bn_openvino) for unexpected file reads via strace or similar tools.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to read sensitive files on the system running BerryNet, such as configuration files, secrets, or other confidential data. This could lead to information disclosure, privilege escalation, or further attacks if the exposed data is used to gain unauthorized access. The attack is remote and does not require local access.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, and other regulations that require protection of sensitive data. Unauthorized access to personal or health information could result in data breaches, triggering legal penalties, fines, and reputational damage for organizations handling regulated data.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade BerryNet to a patched version if available. If not, restrict write access to model package directories and validate label paths in meta.json to ensure they are relative paths. Disable engine services until mitigation is applied.

Useful 0 Not Useful 0