FKIE_CVE-2017-17877

Vulnerability from fkie_nvd - Published: 2017-12-27 17:08 - Updated: 2025-04-20 01:37
Severity ?
9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device is publicly available via IPv6 TCP port 22 over the internet (with stateless address autoconfiguration) by default, which makes it easier for remote attackers to obtain access by guessing 24 bits of the MAC address and attempting a root login. This can be exploited in conjunction with CVE-2017-17878.
References
cve@mitre.orghttps://blogger.davidmanouchehri.com/2017/12/steam-link-security-remotely-insecure.htmlIssue Tracking, Third Party Advisory
cve@mitre.orghttps://github.com/ValveSoftware/steamlink-sdk#ssh-accessIssue Tracking, Third Party Advisory
cve@mitre.orghttps://github.com/ValveSoftware/steamlink-sdk/issues/119Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://blogger.davidmanouchehri.com/2017/12/steam-link-security-remotely-insecure.htmlIssue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/ValveSoftware/steamlink-sdk#ssh-accessIssue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/ValveSoftware/steamlink-sdk/issues/119Issue Tracking, Third Party Advisory
Impacted products
Vendor Product Version
valvesoftware steam_link_firmware *
valvesoftware steam_link -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:valvesoftware:steam_link_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E520167E-6F54-473E-9839-C47814137C7A",
              "versionEndExcluding": "644",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:valvesoftware:steam_link:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EAAF46A5-190A-4578-8010-23DE5E75C898",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device is publicly available via IPv6 TCP port 22 over the internet (with stateless address autoconfiguration) by default, which makes it easier for remote attackers to obtain access by guessing 24 bits of the MAC address and attempting a root login. This can be exploited in conjunction with CVE-2017-17878."
    },
    {
      "lang": "es",
      "value": "Se ha descubierto un problema en la build 643 de Valve Steam Link. Cuando el demonio SSH est\u00e1 activado para desarrollo local, el dispositivo est\u00e1 disponible p\u00fablicamente mediante el puerto 22 de TCP IPv6 en internet (con una autoconfiguraci\u00f3n de direcci\u00f3n sin estado) por defecto. Esto facilita a los atacantes remotos obtener acceso adivinando 24 bits de la direcci\u00f3n MAC e intentando iniciar sesi\u00f3n como root. Esto se puede explotar junto con CVE-2017-17878."
    }
  ],
  "id": "CVE-2017-17877",
  "lastModified": "2025-04-20T01:37:25.860",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-12-27T17:08:21.060",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://blogger.davidmanouchehri.com/2017/12/steam-link-security-remotely-insecure.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://github.com/ValveSoftware/steamlink-sdk#ssh-access"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://github.com/ValveSoftware/steamlink-sdk/issues/119"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://blogger.davidmanouchehri.com/2017/12/steam-link-security-remotely-insecure.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://github.com/ValveSoftware/steamlink-sdk#ssh-access"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://github.com/ValveSoftware/steamlink-sdk/issues/119"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.