CVE-2024-58287
HIGHreNgine 2.2.0 - Authenticated Remote Code Execution via Nmap Command Parameter Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-58287. PoCs published by Caner Tercan.
AI-analyzed exploit summary This exploit demonstrates a command injection vulnerability in reNgine 2.2.0 by modifying the `nmap_cmd` parameter in the YML configuration. The payload decodes a base64-encoded Python reverse shell, which connects to a specified IP and port.
Description
reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands. Attackers can modify the nmap_cmd parameter with malicious base64-encoded payloads to achieve remote code execution during scan engine configuration.
Exploits (1)
This exploit demonstrates a command injection vulnerability in reNgine 2.2.0 by modifying the `nmap_cmd` parameter in the YML configuration. The payload decodes a base64-encoded Python reverse shell, which connects to a specified IP and port.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H