Netcore NR255-V QoS Bandwidth Plan Information Disclosure

Executive Summary

This vulnerability is a sensitive information disclosure issue in Netcore NR255-V version 1.5.130703. It occurs in the mod_qos_bandwidth plan.json handling within specific files. Authenticated users with broad roles can access QoS read routes to obtain live network telemetry beyond their intended privilege level.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check for unauthorized access to QoS read routes in Netcore NR255-V version 1.5.130703. Monitor network traffic for requests to mod_qos_bandwidth plan.json endpoints. Review logs for unusual access patterns by authenticated users with broad roles.

Useful 0 Not Useful 0

Impact Analysis

An attacker with authenticated access could exploit this to view sensitive network telemetry data they are not authorized to see. This could include real-time network performance metrics or other confidential information.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows authenticated users with broad roles to access sensitive network telemetry data beyond their intended privilege level. This could lead to unauthorized disclosure of personal or sensitive information, which may violate compliance requirements under regulations like GDPR (data protection) and HIPAA (health information privacy).

Useful 0 Not Useful 0

Mitigation Strategies

Update Netcore NR255-V to the latest version that patches the sensitive information disclosure vulnerability in mod_qos_bandwidth plan.json handling. Restrict authenticated user roles to the minimum required privileges to prevent unauthorized access to QoS read routes.

Useful 0 Not Useful 0