Command Injection in Multiple Snap One Araknis Networks Products
CVE-2021-40144, CVE-2021-40844, CVE-2021-42661: Command Injection vulnerabilities in Snap One Araknis Networks® switches and access points.
Aon’s Cyber Solutions discovered multiple command injection vulnerabilities affecting a number of Snap One Araknis Networks® switches and access points. The list of affected products and firmware versions can be found below. The vulnerabilities were discovered by Aon’s Cyber Solutions team member Howard McGreehan.
Aon would like to thank Snap One for working with us as part of our coordinated disclosure process.
Timeline:
- 03/21/21 – Initial disclosure to [email protected]
- 06/01/21 – Issues confirmed by Snap One, firmware upgrade release dates set
- 10/05/21 – Patches released
- 06/07/22 – Aon advisory released
Vulnerability Listing / Credits:
- CVE-2021-40144 – Command Injection in datajson.cgi
- CVE-2021-40844 – Command Injection in OpenWRT LuCI
- CVE-2021-42661 – Command Injection in OpenWRT LuCI
Affected Products:
According to the vendor, the following products and firmware versions are affected:
Product | Firmware Version | CVE ID |
---|---|---|
Araknis Networks AN-210 Network Switches | < 1.3.10 | CVE-2021-40144 |
Araknis Networks AN-810 Access Points | < 2.1.02 | CVE-2021-40844 |
Araknis Networks AN-700-O Access Points | < 2.1.02 | CVE-2021-42661 |
Command Injection in Multiple Snap One Araknis Networks Products
Overview
Multiple Snap One Araknis Networks products are vulnerable to authenticated command injection attacks within their administrative panels. This vulnerability can be triggered by sending specially crafted HTTP requests to affected models’ onboard, web-based networking tools. Exploiting these vulnerabilities allows the attacker to fully takeover the devices as the root user and may be leveraged via Cross-Site Request Forgery (CSRF).
Remediation
Firmware updates may be obtained through Snap One Partners or from the Snap One Product Support section.
Vendor Thanks:
https://www.control4.com/company/privacy-and-security/thank-you-white-hats
Explore More
-
Capability Overview
Cyber Resilience
-
Product / Service
Penetration Testing Services
-
Howard McGreehanManager, Security Testing, Cyber Solutions
About Cyber Solutions:
Aon’s Cyber Solutions offers holistic cyber risk management, unsurpassed investigative skills, and proprietary technologies to help clients uncover and quantify cyber risks, protect critical assets, and recover from cyber incidents.
General Disclaimer
This material has been prepared for informational purposes only and should not be relied on for any other purpose. You should consult with your own professional advisors or IT specialists before implementing any recommendation or following the guidance provided herein. Further, the information provided and the statements expressed are not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information and use sources that we consider reliable, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future.
Terms of Use
The contents herein may not be reproduced, reused, reprinted or redistributed without the expressed written consent of Aon, unless otherwise authorized by Aon. To use information contained herein, please write to our team.
Aon's Better Being Podcast
Our Better Being podcast series, hosted by Aon Chief Wellbeing Officer Rachel Fellowes, explores wellbeing strategies and resilience. This season we cover human sustainability, kindness in the workplace, how to measure wellbeing, managing grief and more.
-
Podcast 23 mins
Better Being Series: Understanding Burnout in the Workplace -
Podcast 14 mins
Better Being Series: Why Nutrition Matters -
Podcast 10 mins
Better Being Series: Discover the ‘Blue Zones’ Where People Live Longer -
Podcast 20 mins
Better Being Series: Improving Your Financial Wellbeing -
Podcast 17 mins
Better Being Series: Are You Taking Care of Your Digital Wellbeing? -
Podcast 19 mins
On Aon Podcast: Better Being Series Dives into Women’s Health -
Podcast 29 mins
On Aon’s Better Being Series: The World Wellbeing Movement -
Podcast 28 mins
On Aon’s Better Being Series: Mental Health and Creating Kinder Cultures -
Podcast 25 mins
On Aon’s Better Being Series: Managing Loss and Grief -
Podcast 24 mins
On Aon’s Better Being Series: Measuring Wellbeing -
Podcast 25 mins
On Aon’s Better Being Series: Physical Wellbeing and Resilience -
Podcast 23 mins
On Aon’s Better Being Series: Human Sustainability
Aon Insights Series Asia
Expert Views on Today's Risk Capital and Human Capital Issues
-
Article 8 mins
Thriving in an interconnected world: How the C-Suite embraces uncertainty -
Article 6 mins
Powering progress: Collaborating to build a sustainable future in emerging markets -
Article 5 mins
Building Business Resilience: Key Steps to Effectively Integrate Risk Management Across Your Organisation -
Article 7 mins
Why humans are the essential factor in the success of Artificial Intelligence (AI) -
Article 5 mins
Leveraging Research and Expertise to Strengthen Your HR Strategy for 2025 and Beyond
Aon Insights Series Pacific
Expert Views on Today's Risk Capital and Human Capital Issues
Aon Insights Series UK
Expert Views on Today's Risk Capital and Human Capital Issues
-
Article 2 mins
Introduction: Clarity and Confidence to Make Better Decisions -
Article 2 mins
The Age of Rising Resilience – An Economic Outlook -
Article 3 mins
Building Resilience Against the Constant Cyber Threat -
Article 2 mins
Making Better Decisions – A Treasurer’s Perspective -
Article 2 mins
How to Balance the Conflicting Forces of Efficiency, Performance and Wellbeing -
Article 3 mins
Seizing the Opportunity: Building a Comprehensive Approach to Risk Transfer -
Article 2 mins
Tapping New Markets to Unlock Deal Value -
Article 5 mins
The Rise of the Skills-Based Organisation -
Article 2 mins
Creating a Fair and Equitable Workforce for Everyone -
Article 3 mins
The Year of the Vote: How Geopolitical Volatility Will Impact Businesses -
Article 2 mins
The Aon Difference
Construction and Infrastructure
The construction industry is under pressure from interconnected risks and notable macroeconomic developments. Learn how your organization can benefit from construction insurance and risk management.
-
Article 8 mins
How North American Construction Contractors Can Mitigate Emerging Risks -
Article 7 mins
Managing Construction Risks: 7 Risk Advisory Steps -
Article 7 mins
Unlocking Capacity and Capital in a Challenging Construction Risk Market -
Article 7 mins
Protecting North American Contractors from Extreme Heat Risks with Parametric -
Article 5 mins
How Climate Modeling Can Mitigate Risks and Improve Resilience in the Construction Industry -
Report 1 mins
Construction Risk Management Europe Report 2023 -
Article 8 mins
Parametric Can Help Mitigate Extreme Heat Risks for Contractors in EMEA -
Article 9 mins
How the Construction Industry is Navigating Climate Change -
Article 11 mins
Top Risks Facing Construction and Real Estate Organizations
Cyber Labs
Stay in the loop on today's most pressing cyber security matters.
-
Cyber Labs 9 mins
Mounted Guest EDR Bypass -
Cyber Labs 6 mins
Optimizing Your Cyber Resilience Strategy Through CISO and CRO Connectivity -
Cyber Labs 9 mins
Bypassing EDR through Retrosigned Drivers and System Time Manipulation -
Cyber Labs 10 mins
DNSForge – Responding with Force -
Cyber Labs 7 mins
Unveiling "sedexp": A Stealthy Linux Malware Exploiting udev Rules -
Cyber Labs 3 mins
Command Injection and Path Traversal in StoneFly Storage Concentrator -
Cyber Labs 7 mins
Adopt an AI Approach with Confidence, for CISOs and CIOs -
Cyber Labs 3 mins
Responding to the CrowdStrike Outage: Implications for Cyber and Technology Professionals -
Cyber Labs 10 mins
DUALITY Part II - Initial Access and Tradecraft Improvements -
Cyber Labs 17 mins
Cracking Into Password Requirements -
Cyber Labs 57 mins
DUALITY: Advanced Red Team Persistence through Self-Reinfecting DLL Backdoors for Unyielding Control -
Cyber Labs 7 mins
Restricted Admin Mode – Circumventing MFA On RDP Logons -
Cyber Labs 9 mins
Detecting “Effluence”, An Unauthenticated Confluence Web Shell -
Cyber Labs 10 mins
Flash Loan Attacks: A Case Study -
Cyber Labs 7 mins
Financially Motivated Criminal Group Targets Telecom, Technology & Manufacturing -
Cyber Labs 16 mins
New Burp Suite Extension: BlazorTrafficProcessor -
Cyber Labs 3 mins
Command Injection and Buffer Overflow in Multiple Sharp NEC Displays -
Cyber Labs 3 mins
Command Injection in Multiple Snap One Araknis Networks Products -
Cyber Labs 6 mins
Introducing D-Modem: A software SIP modem -
Cyber Labs 10 mins
CVE-2021-1825: Inadequate Input Encoding in WebKit
Cyber Resilience
Our Cyber Resilience collection gives you access to Aon’s latest insights on the evolving landscape of cyber threats and risk mitigation measures. Reach out to our experts to discuss how to make the right decisions to strengthen your organization’s cyber resilience.
-
Article 9 mins
Building Resilience in a Buyer-Friendly Cyber and E&O Market -
Article 11 mins
A Middle Market Roadmap for Cyber Resilience -
Article 8 mins
Lessons Learned from the CrowdStrike Outage: 5 Strategies to Build Cyber Resilience -
Article 8 mins
Responding to Cyber Attacks: How Directors and Officers and Cyber Policies Differ -
Article 7 mins
Why Now is the Right Time to Customize Cyber and E&O Contracts -
Article 6 mins
8 Steps Toward Building Better Resilience Against Rising Ransomware Attacks -
Article 7 mins
Mitigating Insider Threats: Managing Cyber Perils While Traveling Globally -
Article 5 mins
Managing Cyber Risk through Return on Security Investment -
Article 10 mins
Mitigating Insider Threats: Your Worst Cyber Threats Could be Coming from Inside -
Article 9 mins
Why HR Leaders Must Help Drive Cyber Security Agenda -
Article 10 mins
Escalating Cyber Security Risks Mean Businesses Need to Build Resilience
Employee Wellbeing
Our Employee Wellbeing collection gives you access to the latest insights from Aon's human capital team. You can also reach out to the team at any time for assistance with your employee wellbeing needs.
-
Article 9 mins
The Next Evolution of Wellbeing is About Performance -
Article 6 mins
Three Ways Collective Retirement Plans Support HR Priorities -
Article 9 mins
How the Right Employee Wellbeing Strategy Impacts Microstress and Burnout at Work -
Podcast 19 mins
On Aon Podcast: Better Being Series Dives into Women’s Health -
Article 7 mins
Making Wellbeing Part of a Company’s DNA -
Podcast 24 mins
On Aon’s Better Being Series: Measuring Wellbeing -
Podcast 25 mins
On Aon’s Better Being Series: Physical Wellbeing and Resilience -
Article 7 mins
Why Workforce Wellbeing is Vital to Company Performance -
Article 7 mins
COVID-19 has Permanently Changed the Way We Think About Wellbeing
Environmental, Social and Governance Insights
Explore Aon's latest environmental social and governance (ESG) insights.
-
Article 8 mins
Why ESG Is Even More Important In A Crisis Like COVID-19 -
Podcast 16 mins
On Aon Podcast: Approach to DE&I in the Workplace
Q4 2023 Global Insurance Market Insights
Our Global Insurance Market Insights highlight insurance market trends across pricing, capacity, underwriting, limits, deductibles and coverages.
-
Article 12 mins
Q4 2023: Global Insurance Market Overview -
Article 13 mins
Top Risk Trends to Watch in 2024
Regional Results
How do the top risks on business leaders’ minds differ by region and how can these risks be mitigated? Explore the regional results to learn more.
-
Article 12 mins
Top Risks Facing Organizations in Asia Pacific -
Article 12 mins
Top Risks Facing Organizations in North America -
Article 10 mins
Top Risks Facing Organizations in Europe -
Article 8 mins
Top Risks Facing Organizations in Latin America -
Article 8 mins
Top Risks Facing Organizations in the Middle East and Africa -
Article 9 mins
Top Risks Facing Organizations in the United Kingdom
Human Capital Analytics
Our Human Capital Analytics collection gives you access to the latest insights from Aon's human capital team. Contact us to learn how Aon’s analytics capabilities helps organizations make better workforce decisions.
-
Article 14 mins
How Technology Will Transform Employee Benefits in the Next Five Years -
Podcast 18 mins
On Aon Podcast: Technology Impacting the Future of Health and Benefits -
Article 8 mins
Integrating Workforce Data to Uncover Hidden Insights -
Article 9 mins
How Employers Can Use Data to Improve Their Health Plans -
Podcast 24 mins
On Aon’s Better Being Series: Measuring Wellbeing -
Article 11 mins
Designing Tomorrow: Personalizing EVP, Benefits and Total Rewards -
Article 9 mins
How to Balance Cost with Growth in a Shifting Talent Market -
Article 8 mins
How Companies are Mitigating Rising Medical Costs -
Article 10 mins
How Data and Analytics Can Optimize HR Programs
Insights for HR
Explore our hand-picked insights for human resources professionals.
-
Article 7 mins
COVID-19 has Permanently Changed the Way We Think About Wellbeing -
Article 7 mins
DE&I in Benefits Plans: A Global Perspective -
Article 10 mins
How Data and Analytics Can Optimize HR Programs -
Article 9 mins
Why HR Leaders Must Help Drive Cyber Security Agenda -
Article 7 mins
Case Study: The LPGA Unlocks Talent Potential with Data -
Article 11 mins
Navigating the New EU Directive on Pay Transparency -
Article 4 mins
How to Design Better Talent Assessment to Promote DE&I -
Article 6 mins
Training and Transforming Managers for the Future of Work -
Article 7 mins
Rethinking Your Total Rewards Programs During Mergers and Acquisitions -
Article 14 mins
Building a Resilient Workforce That Steers Organizational Success | An Outlook Across Industries
Workforce
Our Workforce Collection provides access to the latest insights from Aon’s Human Capital team on topics ranging from health and benefits, retirement and talent practices. You can reach out to our team at any time to learn how we can help address emerging workforce challenges.
-
Report 14 mins
A Workforce in Transition Prepares to Meet a Host of Challenges -
Article 17 mins
3 Strategies to Improve Career Outcomes for Older Employees -
Article 7 mins
Companies Need a Global Benefits Identity in an Era of Cost Containment -
Article 8 mins
Driving Inclusion and Diversity with Employee Benefits -
Article 17 mins
Five Big Human Resources Trends to Watch in 2024 -
Article 8 mins
How Companies are Mitigating Rising Medical Costs -
Report 1 mins
The Global Medical Trend Rates Report 2025 -
Podcast 25 mins
On Aon’s Better Being Series: Physical Wellbeing and Resilience -
Article 9 mins
How the Right Employee Wellbeing Strategy Impacts Microstress and Burnout at Work -
Article 11 mins
Advancing Women’s Health and Equity Through Benefits and Support -
Podcast 18 mins
On Aon Podcast: Technology Impacting the Future of Health and Benefits -
Article 7 mins
How Collective Retirement Plans Help Support Financial Sustainability
Mergers and Acquisitions
Our Mergers and Acquisitions (M&A) collection gives you access to the latest insights from Aon's thought leaders to help dealmakers make better decisions. Explore our latest insights and reach out to the team at any time for assistance with transaction challenges and opportunities.
-
Article 8 mins
Exit Strategy Value Creation Opportunities Exist as Economic Pressures Persist -
Article 5 mins
Future Trends for Financial Sponsors: Secondary Transactions -
Article 7 mins
3 Ways to Unlock M&A Value in a Challenging Credit Environment -
Article 7 mins
Rethinking Your Total Rewards Programs During Mergers and Acquisitions -
Article 9 mins
Organizational Design and Talent Planning are Key to M&A Success -
Article 7 mins
An Ever-Complex Global Tax Environment Requires Strong M&A Risk Solutions -
Article 6 mins
Project Management for HR: The Secret Behind a Successful M&A Deal -
Article 9 mins
Cultural Alignment Planning Drives M&A Success -
Report 1 mins
A Guide to Maximizing Value in Post-Merger Integrations -
Report 2 mins
The ABC's of Private Equity M&A: Deal Flow Impacts of Al, Big Tech and Climate Change -
Article 11 mins
The Silver Lining on M&A Deal Clouds: M&A Insurance Insights from 2023
Navigating Volatility
How do businesses navigate their way through new forms of volatility and make decisions that protect and grow their organizations?
Parametric Insurance
Our Parametric Insurance Collection provides ways your organization can benefit from this simple, straightforward and fast-paying risk transfer solution. Reach out to learn how we can help you make better decisions to manage your catastrophe exposures and near-term volatility.
-
Article 10 mins
How Public Entities and Businesses Can Use Parametric for Emergency Funding -
Article 6 mins
Parametric Insurance: A Complement to Traditional Property Coverage -
Article 8 mins
Using Parametric Insurance to Match Capital to Climate Risk -
Article 6 mins
Using Parametric Insurance to Close the Earthquake Protection Gap -
Article 5 mins
How Technology Enhancements are Boosting Parametric
Pay Transparency and Equity
Our Pay Transparency and Equity collection gives you access to the latest insights from Aon's human capital team on topics ranging from pay equity to diversity, equity and inclusion. Contact us to learn how we can help your organization address these issues.
-
Article 10 mins
How Financial Institutions can Prepare for Pay Transparency Legislation -
Article 8 mins
Pay Transparency Can Lead to Better Equity Across Benefits -
Article 12 mins
Understanding and Preparing for the Rise in Pay Transparency -
Podcast 14 mins
On Aon Podcast: Understanding Pay Transparency Regulations -
Article 11 mins