Exploitation Summary
CVE-2012-0262 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including Metasploit, including a Metasploit module exploits/multi/http/op5_welcome.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in OP5 Monitor's welcome page, allowing arbitrary root command execution via the 'password' parameter. The exploit sends a crafted POST request with a payload embedded in backticks to achieve RCE.
Description
op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.
Exploits (2)
This Metasploit module exploits a command injection vulnerability in OP5 Monitor's welcome page, allowing arbitrary root command execution via the 'password' parameter. The exploit sends a crafted POST request with a payload embedded in backticks to achieve RCE.
This Metasploit module exploits a command injection vulnerability in OP5 Monitor's welcome page, allowing arbitrary root command execution via the 'password' parameter. The exploit uses a POST request to inject a payload enclosed in backticks, which is executed by the underlying system.