CVE-2020-7980

CRITICALNuclei

intelliantech aptus_web Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-7980 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit, 1 repository PoC, and 1 Nuclei template.

Description

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Nov 15, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1
Repository PoCs
1
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

aptus_web

Browse intelliantech / aptus_web
VulnCheckVersion data not supplied

Proofs of concept

2

Catalogued exploits

ExploitDBSatellian 1.12 - Remote Code ExecutionExploitDB exploitby Xh4HNot analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitHubXh4H/Satellian-CVE-2020-7980Repository PoCby Xh4H73Not analyzed2 files

3.9 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryCRITICALSatellian Intellian Aptus Web <= 1.24 - Remote Command ExecutionCVSS 9.8

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.

Impact

Successful exploitation of this vulnerability allows remote attackers to execute arbitrary commands on the target system.

Remediation

Upgrade to a patched version of Satellian Intellian Aptus Web (version > 1.24).

WeaknessesCWE-78
Authorsritikchaddha
Template tagscve2020cveintellianaptuspacketstormsatellianrceintelliantechvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:intelliantech:aptus_web:1.24:*:*:*:*:*:*:*
Shodan: http.title:"Intellian Aptus Web"
Shodan: http.title:"intellian aptus web"
FOFA: title="intellian aptus web"
Google: intitle:"intellian aptus web"
https://nvd.nist.gov/vuln/detail/CVE-2020-7980 https://sku11army.blogspot.com/2020/01/intellian-aptus-web-rce-intellian.html https://github.com/Xh4H/Satellian-CVE-2020-7980 http://packetstormsecurity.com/files/156143/Satellian-1.12-Remote-Code-Execution.html https://github.com/0xT11/CVE-POC

Source: ProjectDiscovery

References

4