CVE-2017-14705

DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted into the type parameter to the tailDateFile function in /webservices/stream/tail.php. An iToken authentication parameter is required but can be obtained by exploiting CVE-2017-14706. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments.

CVSS v3.0

8.1 HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

7.36% chance of exploitation in the next 30 days, 94th percentile

Published

2017-09-22

Updated

2024-09-17

Proof-of-concept exploits (2)

• rapid7/metasploit-framework/pull/8980
• https://pentest.blog/advisory-denyall-web-application-firewall-unauthenticated-remote-cod…

References

• CVE Record
• NVD entry

Related

• CVE-2020-7377
• CVE-2022-23227
• CVE-2024-51978
• CVE-2017-14704
• CVE-2017-14706
• CVE-2017-14703