UgCSに認証なしでログインできる脆弱性、6.2で修正
Summary
ドローン運用ソフトUgCSのサーバーに、認証情報なしでログインできてしまう脆弱性が見つかりました。6.2未満を使う組織は6.2へ更新し、TCPの3334番ポートに届く範囲も絞ってください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
ドローン運用ソフトUgCSのサーバーに、認証情報なしでログインできてしまう脆弱性が見つかりました。6.2未満を使う組織は6.2へ更新し、TCPの3334番ポートに届く範囲も絞ってください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| SPH Engineering | UgCS |
< 6.2 |
6.2 |
Original description The description as published by the source.
UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains exactly one user (the default single-operator installation), a LoginRequest with empty userLogin and userPassword fields is interpreted as "use the only user" rather than as invalid credentials, and the server returns a fully authenticated session. Because the service listens on all interfaces (0.0.0.0) without TLS by default, an unauthenticated remote attacker with network access to port 3334 can obtain an authenticated session without knowing any credential and then issue privileged commands, including commanding connected drones and uploading flight routes.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web ugcs.com
- web offseq.com
- web nvd.nist.gov
- web offseq.com
- web ugcs.com
- web github.com