Milesight Industrial Cellular Routers Exposure Scanner

Milesight Industrial Cellular Routers are utilized in industrial environments to provide robust and reliable communication. These routers are predominantly used by industries such as manufacturing, transportation, and utilities to ensure seamless data transmission. Designed to withstand tough environmental conditions, they support critical applications requiring stable network connectivity. The routers offer features like VPN, firewall, and device management, aimed at maintaining network security and performance. They are also integral in enabling remote management and monitoring of industrial systems. With advanced networking capabilities, these routers play a key role in the industrial internet of things (IIoT) setups.

Information Disclosure vulnerabilities involve the exposure of sensitive information to unauthorized entities. In this specific case, the Milesight Industrial Cellular Routers were found to expose system logs publicly. The logs contained critical internal details, potentially enabling attackers to gain insights into the network setup. Such vulnerabilities can arise due to improper configuration or insufficient access controls on the devices. They pose a risk to the confidentiality of the network and increase the likelihood of subsequent attacks. Addressing these vulnerabilities is crucial to ensure the integrity and privacy of industrial communication networks.

Technical specifics of this vulnerability involve the router's endpoint that is responsible for handling system logs. The exposed endpoint is {{BaseURL}}/lang/log/system.log, where sensitive log information is accessible. Within these logs, key details such as daemon.info and authpriv.info are included, indicating potential access to security logs. The absence of proper authentication to view these logs allows unauthorized users to easily retrieve them. The status code "200" accompanying the response further confirms successful access to the log file. Properly securing this endpoint with authentication mechanisms is necessary to mitigate this disclosure issue.

Exploitation of this vulnerability can lead to several adverse effects. Attackers may analyze the disclosed log information to understand the network's structure and actively plan targeted attacks. Such disclosures can result in unauthorized access, leading to potential disruptions in industrial operations. Compromised routers could facilitate data interception or unauthorized data modification. There is also an increased risk of confidentiality breaches, affecting sensitive industrial data. This vulnerability undermines the overall security posture of the network, inviting further malicious activities if left unaddressed.

REFERENCES

• https://medium.com/@win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf