Arbitrary File Deletion in TeamDavid's Webbox

Executive Summary

This vulnerability allows an attacker to delete any file on the system by exploiting the email, fax, or SMS functionality in Tobit Laboratories AG TeamDavid's Webbox. The attacker can specify an @@COMMENTFILE command in the scjob form field to trigger arbitrary file deletion. This affects TeamDavid versions up to Rollout 524.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor for unusual file deletion activities or suspicious commands containing @@COMMENTFILE in the scjob form field. Check TeamDavid logs for unauthorized access attempts to the send email, fax, or SMS functionality. Review system logs for unexpected file deletions or errors related to TeamDavid processes.

Useful 0 Not Useful 0

Impact Analysis

An attacker could delete critical system files, leading to data loss, system instability, or denial of service. If sensitive files are deleted, it could disrupt business operations or expose confidential information. The CVSS score of 8.4 indicates high severity with potential for significant impact.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized file deletion, potentially violating data integrity and availability requirements under GDPR and HIPAA. Loss of sensitive data may result in non-compliance, legal penalties, or reputational damage for organizations handling regulated information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update TeamDavid to the latest version beyond Rollout 524. Disable or restrict access to the send email, fax, or SMS functionality if not required. Implement network segmentation to limit exposure. Monitor for any signs of exploitation and review logs for unauthorized activities.

Useful 0 Not Useful 0