Vulnerability Spotlight: OS command injection, directory traversal and other vulnerabilities found in Siretta Quartz-Gold and Fresh Tomato

Summary: Cisco Talos discovered several vulnerabilities in the Siretta Quartz-Gold industrial cellular router and in FreshTomato open source firmware, including OS command injection flaws it rates high risk for arbitrary command execution. The findings include three directory traversals in QUARTZ-GOLD leading to arbitrary file deletion, three stack-based buffer overflows, a heap-based buffer overflow, leftover debug code enabling remote code execution, and a file write vulnerability enabling arbitrary file upload, with fixes available for Siretta QUARTZ-GOLD G5.0.1.5-210720-141020, FreshTomato 2022.5 and AdvancedTomato commit 67273b0.
Why it matters: These are internet-facing industrial cellular routers with command injection and remote code execution reachable through HTTP and network requests, and Talos confirmed the listed versions could be exploited - so any deployment still on those builds is exposed until updated.

Read the original at Cisco Talos ↗