Exploitation Summary
EIP tracks 3 public exploits for CVE-2013-10058.
PoCs published by Metasploit, m-1-k-3, including Metasploit module exploits/linux/http/linksys_wrt160nv2_apply_exec.
AI-analyzed exploit summary This Metasploit module exploits an authenticated OS command injection vulnerability in Linksys WRT160nv2 routers via the apply.cgi endpoint. It uses TFTP to stage and execute a MIPS payload, demonstrating full remote code execution.
Description
An authenticated OS command injection vulnerability exists in various Linksys router models (tested on WRT160Nv2) running firmware version v2.0.03 via the apply.cgi endpoint. The web interface fails to properly sanitize user-supplied input passed to the ping_size parameter during diagnostic operations. An attacker with valid credentials can inject arbitrary shell commands, enabling remote code execution.
Exploits (3)
This Metasploit module exploits an authenticated OS command injection vulnerability in Linksys WRT160nv2 routers via the apply.cgi endpoint. It uses TFTP to stage and execute a MIPS payload, demonstrating full remote code execution.
This exploit demonstrates an OS command injection vulnerability in Linksys WRT160Nv2 firmware v2.0.03 via the `ping_size` parameter in `apply.cgi`, allowing arbitrary command execution. It also includes details on directory traversal, XSS, and CSRF vulnerabilities.
This Metasploit module exploits an authenticated OS command injection vulnerability in Linksys WRT160nv2 routers via the apply.cgi endpoint. It leverages default credentials (admin/admin or admin/password) to execute arbitrary commands, including staging and executing a MIPS payload via TFTP.
References (5)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N