systeminformation < 5.3.1 - OS Command Injection via Service Parameter Handling
Title source: llmExploitation Summary
CVE-2021-21315 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added January 18, 2022. EIP tracks 6 public exploits from researchers including ForbiddenProgrammer, alikarimi999, G01d3nW01f. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional Proof of Concept (PoC) for CVE-2021-21315, demonstrating a command injection vulnerability in the 'systeminformation' npm package. The exploit leverages improper sanitization of array inputs to execute arbitrary commands on the target system.
Description
The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. As a workaround instead of upgrading, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() ... do only allow strings, reject any arrays. String sanitation works as expected.
Exploits (6)
This repository contains a functional Proof of Concept (PoC) for CVE-2021-21315, demonstrating a command injection vulnerability in the 'systeminformation' npm package. The exploit leverages improper sanitization of array inputs to execute arbitrary commands on the target system.
This repository contains a functional exploit for CVE-2021-21315, a command injection vulnerability in the 'systeminformation' npm package. The exploit crafts a malicious URL with a base64-encoded reverse shell payload and sends it to the target, triggering remote code execution.
This repository contains a functional Rust-based exploit for CVE-2021-21315, which crafts a reverse shell payload encoded in base64 and URL-encoded to target a vulnerable API endpoint. The exploit sends the payload via HTTP request to achieve remote code execution.
This repository contains a functional PoC for CVE-2021-21315, demonstrating a command injection vulnerability in the 'systeminformation' npm package. The exploit leverages improper sanitization of array inputs to execute arbitrary commands via the `si.services()` function.
This repository contains a functional exploit PoC for CVE-2021-21315, targeting a command injection vulnerability in the Node.js npm package 'systeminformation'. The exploit sends a crafted HTTP request to execute a reverse shell via a command injection in the 'name[]' parameter.
The repository contains a functional Python exploit for CVE-2021-21315, targeting the 'systeminformation' npm package. It leverages command injection via a crafted API request to achieve remote code execution (RCE) by spawning a reverse shell.
Nuclei Templates (1)
References (6)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N