CVE-2013-5758
EXPLOITEDYealink SIP-T38G - Authenticated OS Command Injection via cgiServer.exx System Method
Title source: llmExploitation Summary
CVE-2013-5758 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including Mr.Un1k0d3r.
AI-analyzed exploit summary This exploit leverages command execution (CVE-2013-5758) to modify system file permissions and escalate privileges by altering the /etc/passwd file, granting root access to the guest account.
Description
cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissions, and modifying files.
Exploits (2)
This exploit leverages command execution (CVE-2013-5758) to modify system file permissions and escalate privileges by altering the /etc/passwd file, granting root access to the guest account.
This exploit demonstrates remote command execution on Yealink VoIP Phone SIP-T38G by sending a crafted POST request to the cgiServer.exx endpoint, leveraging default credentials and the system function to execute arbitrary commands.