Vulnerability · Published Aug 12, 2024 · Assigned by VulnCheck

CVE-2024-40893Firewalla BTLE Authenticated Command Injection

Medium 6.8

In plain English

A medium-severity OS command injection in Box Software from Firewalla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 75% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium

Exploit odds (30 days)1.6%top 24.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Multiple authenticated operating system (OS) command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy (BTLE) interface can use the network configuration service to inject commands in various configuration parameters including networkConfig.Interface.Phy.Eth0.Extra.PingTestIP, networkConfig.Interface.Phy.Eth0.Extra.DNSTestDomain, and networkConfig.Interface.Phy.Eth0.Gateway6. Additionally, because the configuration can be synced to the Firewalla cloud, the attacker may be able to persist access even after hardware resets and firmware re-flashes.

Affected products (as reported)

Vendor	Product	Versions
Firewalla	Box Software	0 – before 1.979

Weakness: CWE-78 · Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

https://vulncheck.com/advisories/firewalla-bt-command-injection third-party-advisory
https://www.labs.greynoise.io/grimoire/2024-08-20-bluuid-firewalla/ technical-description, exploit