CVE-2024-25832
HIGHF-logic DataCube3 v1.0 - Authenticated Unrestricted File Upload via Filename Extension Manipulation
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-25832. PoCs published by Samy Younsi - NS Labs, 0xNslabs.
AI-analyzed exploit summary This exploit chains two CVEs (CVE-2024-25830 and CVE-2024-25832) to achieve remote code execution on DataCube3 v1.0. It first leaks root credentials via an info disclosure vulnerability, then authenticates and uploads a PHP reverse shell via unrestricted file upload.
Description
F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension.
Exploits (2)
This exploit chains two CVEs (CVE-2024-25830 and CVE-2024-25832) to achieve remote code execution on DataCube3 v1.0. It first leaks root credentials via an info disclosure vulnerability, then authenticates and uploads a PHP reverse shell via unrestricted file upload.
This PoC exploits CVE-2024-25830 (improper access control) to leak root credentials and CVE-2024-25832 (unrestricted file upload) to deploy a PHP reverse shell on DataCube3 devices. The script automates the exploit chain, including authentication bypass and payload execution.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H