Exploitation Summary
EIP tracks 2 public exploits for CVE-2023-38829. PoCs published by Victorique-123, adhikara13.
AI-analyzed exploit summary The repository contains functional exploit code for CVE-2023-38829, targeting NETIS WF2409E routers. The exploit demonstrates a command injection vulnerability via crafted HTTP requests to the device's CGI endpoints, allowing remote code execution.
Description
An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface.
Exploits (2)
The repository contains functional exploit code for CVE-2023-38829, targeting NETIS WF2409E routers. The exploit demonstrates a command injection vulnerability via crafted HTTP requests to the device's CGI endpoints, allowing remote code execution.
The repository provides a detailed technical description of a command injection vulnerability in NETIS SYSTEMS Router WF2409E (V3.6.42541), specifically targeting the ping and traceroute functions. It includes step-by-step PoC instructions but lacks functional exploit code.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H