CVE-2019-25065
MEDIUM EXPLOITEDOpenNetAdmin 18.1.1 - Privilege Escalation
Title source: llmExploitation Summary
CVE-2019-25065 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including tr3m0x, HexRazor, sagisar1, including a Metasploit module exploits/unix/webapp/opennetadmin_ping_cmd_injection.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2019-25065, targeting OpenNetAdmin's command injection vulnerability via crafted HTTP POST requests. The exploit includes version detection and command execution capabilities.
Description
A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Exploits (4)
This repository contains a functional exploit for CVE-2019-25065, targeting OpenNetAdmin's command injection vulnerability via crafted HTTP POST requests. The exploit includes version detection and command execution capabilities.
This repository contains a functional exploit for CVE-2019-25065, targeting OpenNetAdmin (ONA) via command injection in the 'xajaxargs[]' parameter. The exploit includes version detection and command execution capabilities.
This repository contains a functional bash script that exploits CVE-2019-25065, an OS command injection vulnerability in OpenNetAdmin v18.1.1. The exploit sends a crafted HTTP request to execute a reverse shell command on the target system.
This Metasploit module exploits a command injection vulnerability in OpenNetAdmin versions 8.5.14 to 18.1.1 by injecting arbitrary commands into the 'ping' functionality via the 'xajaxargs[]' parameter. It uses a cmdstager to execute a reverse shell payload.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L