CVE-2019-25487
CRITICALSapido RB-1732 2.0.43 - Unauthenticated Remote Code Execution via formSysCmd Endpoint
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25487. PoCs published by k1nm3n.aotoi.
AI-analyzed exploit summary This exploit demonstrates a command injection vulnerability in SAPIDO RB-1732 routers by sending a crafted POST request to the 'formSysCmd' endpoint, allowing arbitrary command execution. The script constructs a request with a 'sysCmd' parameter and retrieves the output from the response.
Description
SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the formSysCmd endpoint. Attackers can send POST requests with the sysCmd parameter containing shell commands to execute code on the device with router privileges.
Exploits (1)
This exploit demonstrates a command injection vulnerability in SAPIDO RB-1732 routers by sending a crafted POST request to the 'formSysCmd' endpoint, allowing arbitrary command execution. The script constructs a request with a 'sysCmd' parameter and retrieves the output from the response.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H