Broken Access Control in MBS-Solutions X-Serie Gateway

Executive Summary

This vulnerability is a broken access control issue in the ugw-usr-edit method of the /cgi-bin/wwwugw.cgi file in MBS-Solutions X-Serie Gateway firmware version V6_00_05. It allows a remote authenticated user with a low-privileged Standard role to change the password of any account on the system.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check for unauthorized password changes in the ugw-usr-edit method of /cgi-bin/wwwugw.cgi. Monitor logs for requests to this endpoint by low-privileged Standard role users. Verify account permissions and password reset activities.

Useful 0 Not Useful 0

Impact Analysis

An attacker with Standard role access could escalate privileges by changing passwords of higher-privileged accounts, potentially gaining full control over the gateway. This could lead to unauthorized access, system manipulation, or disruption of connected industrial or building automation systems.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate compliance requirements that mandate strict access controls and data protection, such as GDPR's principle of least privilege or HIPAA's access control safeguards. Unauthorized privilege escalation may lead to data breaches or unauthorized system changes, risking regulatory penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the X-Serie Gateway firmware to the latest version. Restrict access to the ugw-usr-edit method in /cgi-bin/wwwugw.cgi. Audit all user accounts for unauthorized changes and enforce strong password policies.

Useful 0 Not Useful 0