CVE-2021-33357

CRITICALNuclei

raspap raspap Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2021-33357 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/get_netcfg.php, when the "iface" parameter value contains special characters such as ";" which enables an unauthenticated attacker to execute arbitrary OS commands.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 21, 2021 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

raspap

Browse raspap / raspap
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALRaspAP <=2.6.5 - Remote Command InjectionCVSS 9.8

RaspAP 2.6 to 2.6.5 allows unauthenticated attackers to execute arbitrary OS commands via the "iface" GET parameter in /ajax/networking/get_netcfg.php, when the "iface" parameter value contains special characters such as ";".

Impact

Successful exploitation of this vulnerability can lead to unauthorized remote code execution, compromising the integrity and confidentiality of the affected system.

Remediation

Upgrade RaspAP to a version higher than 2.6.5 to mitigate the vulnerability.

WeaknessesCWE-78
Authorspikpikcu, pdteam
Template tagscve2021cverceraspapoastvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:raspap:raspap:*:*:*:*:*:*:*:*
Shodan: http.favicon.hash:-1465760059
FOFA: icon_hash=-1465760059
https://checkmarx.com/blog/chained-raspap-vulnerabilities-grant-root-level-access/ https://gist.github.com/omriinbar/52c000c02a6992c6ce68d531195f69cf https://github.com/RaspAP/raspap-webgui https://nvd.nist.gov/vuln/detail/CVE-2021-33357 https://github.com/20142995/Goby

Source: ProjectDiscovery

References

3