ZDI-CAN-23105: ZDI-24-846: (Pwn2Own) Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPDMwemCmdCreatSHA256Hash function. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
Other sources
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2024-23924.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-23105?
The severity of ZDI-CAN-23105 is critical due to its potential for arbitrary code execution by unauthenticated attackers.
How do I fix ZDI-CAN-23105?
To fix ZDI-CAN-23105, users should apply the latest firmware update provided by Alpine for the Halo9 devices.
Who is affected by ZDI-CAN-23105?
ZDI-CAN-23105 affects users of Alpine Halo9 devices that have not been updated to mitigate the vulnerability.
Can ZDI-CAN-23105 be exploited remotely?
No, ZDI-CAN-23105 requires physical access to the device to exploit the vulnerability.
What is the impact of ZDI-CAN-23105?
The impact of ZDI-CAN-23105 includes the ability of an attacker to execute arbitrary code on the affected devices.