Critical severity · published Jan 2, 2018
CVE-2017-17097
gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and then sends e-mail with…
9.8
CVSS
6.9%
EPSS
No
On KEV
Description
gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and then sends e-mail with a predictable (date-based) password to the admin, which makes it easier for remote attackers to obtain access by predicting this new password. This is related to the use of gmdate for password creation in fn_connect.php.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)6.9% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GT
Gps Tracking Software · Gps-server
2.1.1; 2.1.2; 2.1.3; 2.1.4; 2.1.5; 2.1.6; +27 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-17097
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-17097
Patch
https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fec
Release Notes
https://s1.gps-server.net/changelog.txt
Exploit
https://www.exploit-db.com/exploits/43431/
More from Gps Tracking Software
9.8
CVE-2017-17098
The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote attackers to inject arbitrary PHP code via a crafted request…