CVE-2012-10040

This Metasploit module exploits an authenticated command injection vulnerability in Openfiler v2.x via the 'device' parameter in 'system.html', allowing arbitrary command execution as the 'openfiler' user, which can escalate to root via sudo.

This Metasploit module exploits a command injection vulnerability in Openfiler v2.x by leveraging the 'device' parameter in 'system.html' to execute arbitrary commands via the 'NetworkCard' class constructor. The exploit authenticates with provided credentials and sends a crafted payload to achieve remote code execution under the 'openfiler' user context.