Horizon Alert
Summary of the vulnerability and why it matters
A critical flaw exists in the Intrado 911 Emergency Gateway allowing an attacker to potentially access sensitive system files. This issue requires immediate attention as it could compromise the integrity of critical emergency communication infrastructure.
- Attackers can read arbitrary files.
- Emergency communication systems are at risk.
- This vulnerability is remotely exploitable.
Attack Path
How an attacker could exploit the issue
An unauthenticated attacker can exploit this flaw to read sensitive files from the server's filesystem. This could be achieved by sending a specially crafted request to the download\_debuglog\_file.php endpoint. The goal would be to gain unauthorized access to system information, configuration files, or potentially credentials stored on the Intrado 911 Emergency Gateway.
- No authentication required.
- Targets debug log download endpoint.
- Reads arbitrary files.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability in the Intrado 911 Emergency Gateway's debug log download feature presents a serious risk. Attackers are likely to target this because it allows them to read arbitrary files on the system without authentication, potentially exposing sensitive data or gaining further system insight. The web-accessible nature of the endpoint on an emergency gateway makes it a prime target for external threats.
- Unauthenticated arbitrary file read.
- Critical severity, network-accessible endpoint.
- No evidence of active exploitation currently.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
Prioritize immediate mitigation for Intrado 911 EGW devices due to the critical path traversal vulnerability. Focus on blocking access to the `download_debuglog_file.php` endpoint and consider isolating affected devices if immediate patching is not feasible.
- Block direct network access to the endpoint.
- Isolate potentially affected systems from the network.
- Monitor logs for unauthorized file access attempts.
