CVE-2017-11322
HIGHUCOPIA Wireless Appliance < 5.1.7 - OS Command Injection via chroothole_client Argument
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2017-11322. PoCs published by Sysdream, tnpitsecurity.
AI-analyzed exploit summary The exploit demonstrates a local privilege escalation (LPE) via command injection in the `chroothole_client` binary, allowing an attacker to escape the chroot and gain root access by injecting a reverse shell command.
Description
The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign ($) metacharacter in the argument to chroothole_client.
Exploits (2)
The exploit demonstrates a local privilege escalation (LPE) via command injection in the `chroothole_client` binary, allowing an attacker to escape the chroot and gain root access by injecting a reverse shell command.
The repository provides a functional proof-of-concept for CVE-2017-11322, demonstrating a chroot escape and privilege escalation vulnerability in UCOPIA Wireless Appliance versions prior to 5.1.8. The exploit leverages improper command sanitization in the 'chroothole_client' binary to execute arbitrary commands as root.
References (2)
Scores
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H