Exploitation Summary
EIP tracks 2 public exploits for CVE-2021-46704. PoCs published by MithatGuner, Erenlancaster. A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC demonstrates a command injection vulnerability in GenieACS via the ping host argument, allowing unauthenticated remote code execution. It includes steps to validate the vulnerability and execute a reverse shell payload.
Description
In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ui/api.ts and lib/ping.ts). The vulnerability arises from insufficient input validation combined with a missing authorization check.
Exploits (2)
This PoC demonstrates a command injection vulnerability in GenieACS via the ping host argument, allowing unauthenticated remote code execution. It includes steps to validate the vulnerability and execute a reverse shell payload.
This repository contains a Nuclei template for detecting CVE-2021-46704, an OS command injection vulnerability in GenieACS. It does not include exploit code but provides references and a detection method.
Nuclei Templates (1)
http.favicon.hash:-2098066288 || http.html:"genieacs"
body="genieacs" || icon_hash=-2098066288
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H