CVE-2011-2763
LifeSize Room Appliance Software - Remote Code Execution via gateway.php LSRoom_Remoting.doCommand
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-2763.
PoCs published by Spencer McIntyre, including Metasploit module exploits/unix/http/lifesize_room.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in LifeSize Room versions 3.5.3 and 4.7.18 via a malicious AMF-encoded POST request to the `LSRoom_Remoting.doCommand` function. It leverages a PHP session to authenticate and execute arbitrary commands.
Description
The web interface on the LifeSize Room appliance LS_RM1_3.5.3 (11) and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoom_Remoting.doCommand function in gateway.php.
Exploits (2)
This Metasploit module exploits a command injection vulnerability in LifeSize Room versions 3.5.3 and 4.7.18 via a malicious AMF-encoded POST request to the `LSRoom_Remoting.doCommand` function. It leverages a PHP session to authenticate and execute arbitrary commands.
This Metasploit module exploits a command injection vulnerability in LifeSize Room versions 3.5.3 and 4.7.18 by leveraging a vulnerable resource to inject OS commands via a crafted AMF request. The exploit establishes a session, validates it, and then sends a malicious POST request to execute the payload.