CVE-2022-4510
HIGHbinwalk 2.1.2b-2.3.3 - Path Traversal and Remote Code Execution via Malicious PFS Filesystem
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2022-4510. PoCs published by Etienne Lacoche, adhikara13, electr0sm0g.
AI-analyzed exploit summary This exploit leverages a vulnerability in Binwalk (versions 2.1.2b through 2.3.2) to achieve remote command execution by embedding a malicious Python plugin within a crafted PNG file. The plugin executes a reverse shell via netcat when processed by Binwalk.
Description
A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins. This vulnerability is associated with program files src/binwalk/plugins/unpfs.py. This issue affects binwalk from 2.1.2b through 2.3.3 included.
Exploits (4)
This exploit leverages a vulnerability in Binwalk (versions 2.1.2b through 2.3.2) to achieve remote command execution by embedding a malicious Python plugin within a crafted PNG file. The plugin executes a reverse shell via netcat when processed by Binwalk.
This repository contains a Python script that generates exploits for CVE-2022-4510, a vulnerability in Binwalk. The script can create payloads for SSH key injection, command execution, or reverse shells by embedding malicious code in a PNG file.
This PoC exploits CVE-2022-4510 in Binwalk by crafting a malicious PNG file with embedded Python code that triggers remote command execution via a reverse shell when processed by Binwalk. The exploit leverages Binwalk's plugin system to execute arbitrary commands.
This Python script generates a malicious PFS file to exploit CVE-2022-4510, a path traversal vulnerability in binwalk. It allows arbitrary file overwrite with binwalk's permissions, potentially leading to privilege escalation.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H