CVE-2017-11321
HIGHUCOPIA Wireless Appliance < 5.1.8 - Authenticated Privilege Escalation via Less Command Shell Metacharacter Injection
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2017-11321. PoCs published by Sysdream, tnpitsecurity.
AI-analyzed exploit summary This exploit leverages the `less` command in the restricted shell of UCOPIA Wireless Appliance to escape to an unrestricted shell as the admin user. The vulnerability arises from improper sanitization of system commands, allowing shell command execution via `less`.
Description
The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command.
Exploits (2)
This exploit leverages the `less` command in the restricted shell of UCOPIA Wireless Appliance to escape to an unrestricted shell as the admin user. The vulnerability arises from improper sanitization of system commands, allowing shell command execution via `less`.
The repository provides a detailed technical analysis of CVE-2017-11321, a restricted shell escape vulnerability in UCOPIA Wireless Appliance versions prior to 5.1.8. It explains how the `less` command can be exploited to escape the restricted shell and gain unrestricted access as the admin user.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H