Executive Summary

This vulnerability in Creacast Creabox Manager 4.4.4 allows anyone to access a publicly available endpoint (/get) that exposes sensitive internal configuration data. Specifically, it returns the creacodec.lua file, which contains plaintext administrator credentials, potentially allowing unauthorized access.

Useful 0 Not Useful 0

Impact Analysis

The exposure of plaintext admin credentials through a public endpoint can lead to unauthorized access to the system, allowing attackers to control or manipulate the device or software, potentially leading to data breaches, service disruption, or further exploitation.

Useful 0 Not Useful 0

Detection Guidance

You can detect this vulnerability by checking if the /get endpoint on your Creacast Creabox Manager 4.4.4 instance is publicly accessible and returns sensitive configuration data. For example, you can use a command like: curl http://<target-ip-or-hostname>/get to see if the internal configuration, including creacodec.lua with plaintext admin credentials, is exposed.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include restricting access to the /get endpoint to authorized users only, disabling or removing the endpoint if not needed, and changing any exposed plaintext admin credentials found in the creacodec.lua file. Additionally, monitor access logs for unauthorized requests to this endpoint.

Useful 0 Not Useful 0