CVE-2024-58275

HIGH

Easywall 0.3.1 - Authenticated Remote Command Execution via Ports-Save Endpoint

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-58275. PoCs published by Melvin Mejia.

AI-analyzed exploit summary This exploit demonstrates an authenticated remote command execution vulnerability in Easywall 0.3.1. It leverages a command injection flaw in the 'port' parameter to execute a reverse shell via netcat.

Description

Easywall 0.3.1 allows authenticated remote command execution via a command injection vulnerability in the /ports-save endpoint that suffers from a parameter injection flaw. Attackers can inject shell metacharacters to execute arbitrary commands on the server.

Exploits (1)

exploitdb WORKING POC

by Melvin Mejia · pythonwebappsmultiple

https://www.exploit-db.com/exploits/51856

View Code ZIP pw:eip

This exploit demonstrates an authenticated remote command execution vulnerability in Easywall 0.3.1. It leverages a command injection flaw in the 'port' parameter to execute a reverse shell via netcat.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Easywall 0.3.1

Auth required

Prerequisites: Valid credentials for the Easywall application · Network connectivity to the target · Netcat or similar tool listening on the attacker's machine

MITRE ATT&CK

T1059 - Command and Scripting Interpreter T1078 - Valid Accounts T1090 - Proxy

devstral-2 · analyzed Feb 16, 2026 Full analysis →