CVE-2025-54769
HIGHlpar2rrd < 8.04 - Authenticated Directory Traversal and Remote Code Execution via File Upload
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2025-54769. PoCs published by Byte Reaper, byteReaper77.
AI-analyzed exploit summary This exploit targets CVE-2025-54769 in LPAR2RRD 8.04, leveraging a directory traversal vulnerability to upload a malicious Perl script via the upgrade endpoint, then executing it to achieve remote code execution (RCE). The PoC includes a Perl payload that runs the 'whoami' command and uses cURL for HTTP requests.
Description
An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an attacker.
Exploits (2)
This exploit targets CVE-2025-54769 in LPAR2RRD 8.04, leveraging a directory traversal vulnerability to upload a malicious Perl script via the upgrade endpoint, then executing it to achieve remote code execution (RCE). The PoC includes a Perl payload that runs the 'whoami' command and uses cURL for HTTP requests.
The repository contains a functional exploit for CVE-2025-54769, targeting LPAR2RRD via a directory traversal and RCE vulnerability in the /lpar2rrd-cgi/upgrade.sh endpoint. The exploit uploads a malicious Perl CGI script, leverages path traversal to place it in an executable directory, and triggers remote command execution.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H