CVE-2021-43936
CRITICAL EXPLOITEDwebhmi_firmware < 4.1 - Unrestricted Upload of File with Dangerous Type
Title source: llmExploitation Summary
CVE-2021-43936 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including Jeremiasz Pluta, LongWayHomie.
AI-analyzed exploit summary This exploit leverages an authenticated file upload vulnerability in WebHMI Firmware < 4.1 to achieve remote code execution. It uploads a malicious PHP file and triggers a reverse shell via a crafted GET request.
Description
The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.
Exploits (2)
This exploit leverages an authenticated file upload vulnerability in WebHMI Firmware < 4.1 to achieve remote code execution. It uploads a malicious PHP file and triggers a reverse shell via a crafted GET request.
This is a functional exploit for CVE-2021-43936, targeting WebHMI Firmware < 4.1. It authenticates, uploads a malicious PHP file, and triggers a reverse shell via command injection.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H