CVE-2025-34035

CRITICAL EXPLOITED NUCLEI

EnGenius EnShare Cloud Service <1.4.11 - Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2025-34035 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including LiquidWorm. A Nuclei detection template is also available.

AI-analyzed exploit summary This exploit demonstrates an unauthenticated command injection vulnerability in EnGenius EnShare IoT devices via the 'path' parameter in 'usbinteract.cgi'. It allows arbitrary command execution as root by sending a crafted POST request.

Description

An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands. The injected commands are executed with root privileges, leading to full system compromise. Exploitation evidence was observed by the Shadowserver Foundation on 2024-12-05 UTC.

Exploits (1)

exploitdb WORKING POC
by LiquidWorm · pythonwebappshardware
https://www.exploit-db.com/exploits/42114

This exploit demonstrates an unauthenticated command injection vulnerability in EnGenius EnShare IoT devices via the 'path' parameter in 'usbinteract.cgi'. It allows arbitrary command execution as root by sending a crafted POST request.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: EnGenius EnShare IoT Gigabit Cloud Service (multiple models, versions up to 1.4.11)
No auth needed
Prerequisites: Network access to the target device · EnShare feature enabled (default)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution
CRITICALVERIFIEDby intelligent-ears
Shodan: html:"/web/cgi-bin/usbinfo.cgi"
FOFA: body="/web/cgi-bin/usbinfo.cgi"

References (5)

Core 5
Core References
Exploit, Third Party Advisory third-party-advisory exploit
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5413.php
Exploit, Third Party Advisory third-party-advisory exploit
https://www.exploit-db.com/exploits/42114
Broken Link third-party-advisory exploit
https://packetstormsecurity.com/files/142792
Exploit, Third Party Advisory third-party-advisory exploit
https://cxsecurity.com/issue/WLB-2017060050

Scores

CVSS v3 9.8
EPSS 0.1036
EPSS Percentile 93.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

VulnCheck KEV 2025-06-23
CWE
CWE-78
Status published
Products (50)
EnGenius/EnShare IoT Gigabit Cloud Service < 1.4.11
engeniustech/epg5000_firmware 1.2.0
engeniustech/epg5000_firmware 1.3.0
engeniustech/epg5000_firmware 1.3.2
engeniustech/epg5000_firmware 1.3.3
engeniustech/epg5000_firmware 1.3.3.17
engeniustech/epg5000_firmware 1.3.7.20
engeniustech/epg5000_firmware 1.3.9.21
engeniustech/esr1200_firmware 1.1.0
engeniustech/esr1200_firmware 1.3.1.34
... and 40 more
Published Jun 24, 2025
Tracked Since Feb 18, 2026