Exploitation Summary
EIP tracks 5 public exploits for CVE-2022-24715. PoCs published by Dante Corona, JacobEbben, d4rkb0n3.
AI-analyzed exploit summary This exploit leverages an authenticated file upload vulnerability in Icinga Web 2 to achieve remote code execution by uploading a malicious PHP file disguised as an SSH private key, then triggering it to establish a reverse shell.
Description
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration, can create SSH resource files in unintended directories, leading to the execution of arbitrary code. This issue has been resolved in versions 2.8.6, 2.9.6 and 2.10 of Icinga Web 2. Users unable to upgrade should limit access to the Icinga Web 2 configuration.
Exploits (5)
This exploit leverages an authenticated file upload vulnerability in Icinga Web 2 to achieve remote code execution by uploading a malicious PHP file disguised as an SSH private key, then triggering it to establish a reverse shell.
This is a functional exploit for CVE-2022-24715, an authenticated RCE vulnerability in Icinga Web 2. It leverages a path traversal flaw to upload a malicious PEM file, enabling arbitrary command execution via a webshell.
This Go-based exploit targets CVE-2022-24715 in Icinga Web 2, leveraging a file upload vulnerability to achieve remote code execution (RCE) by injecting a malicious PHP payload into a configuration file. It automates authentication, CSRF token extraction, and module manipulation to trigger the payload.
This is a functional exploit for CVE-2022-24715, an authenticated RCE vulnerability in Icinga Web 2. It uploads a malicious PHP file disguised as an SSH private key, enables a module to execute it, and triggers a reverse shell.
This repository contains a functional exploit for CVE-2022-24715, an authenticated remote code execution vulnerability in Icinga Web 2. The exploit leverages a path traversal vulnerability to upload a malicious payload and achieve RCE.
References (4)
Scores
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H