Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-2751.
PoCs published by Metasploit, Craig Young, hdm, juan vazquez, including Metasploit module exploits/linux/http/netgear_readynas_exec.
AI-analyzed exploit summary This Metasploit module exploits a Perl code injection vulnerability in NETGEAR ReadyNAS devices via the np_handler.pl component, allowing unauthenticated remote command execution through insecure usage of the eval() function.
Description
Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow."
Exploits (2)
This Metasploit module exploits a Perl code injection vulnerability in NETGEAR ReadyNAS devices via the np_handler.pl component, allowing unauthenticated remote command execution through insecure usage of the eval() function.
This Metasploit module exploits a Perl code injection vulnerability in NETGEAR ReadyNAS 4.2.23 and 4.1.11 via the np_handler.pl component. It leverages insecure usage of the eval() function to execute arbitrary commands by injecting a Base64-encoded payload.