CVE-2022-31161

CRITICALNuclei

Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-31161 has a selected CVSS score of 10.0 (critical); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Version 6.1.1.0 contains a patch for this issue.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jun 3, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1
Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 23, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

roxy-wi

Browse hap-wi / roxy-wi
CVE List< 6.1.1.0affected

roxy-wi

Browse roxy-wi / roxy-wi
VulnCheckVersion data not supplied

Proofs of concept

1

Catalogued exploits

ExploitDBRoxy WI v6.1.1.0 - Unauthenticated Remote Code Execution (RCE) via ssl_cert UploadExploitDB exploitby Nuri ÇilengirNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryCRITICALRoxy-WI - Remote Code ExecutionCVSS 9.8

Roxy-WI before 6.1.1.0 is susceptible to remote code execution. System commands can be run remotely via the delcert parameter without proper input validation in the /app/options.py file, allowing attackers to inject arbitrary OS commands.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.

Remediation

Users are advised to upgrade to latest version.

WeaknessesCWE-78
Authorsritikchaddha
Template tagscve2022cverceroxyroxy-wivkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:roxy-wi:roxy-wi:*:*:*:*:*:*:*:*
Shodan: html:"Roxy-WI"
FOFA: body="roxy-wi"
https://pentest.blog/advisory-roxy-wi-unauthenticated-remote-code-executions-cve-2022-31137/ https://github.com/roxy-wi/roxy-wi/security/advisories/GHSA-pg3w-8p63-x483 https://nvd.nist.gov/vuln/detail/CVE-2022-31161

Source: ProjectDiscovery

References

3