Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-101159. PoCs published by Leonardo Nicolas Servalli.
AI-analyzed exploit summary This exploit leverages a privilege escalation vulnerability in ASKEY RTF3505VW-N1 routers by injecting ';/bin/bash' via port 80 and using tcpdump's -z flag to execute arbitrary commands, ultimately spawning a reverse shell. It requires SSH access and exploits improper handling of the -z flag in tcpdump.
Description
ASKEY RTF3505VW-N1 - Privilege Escalation
Exploits (1)
This exploit leverages a privilege escalation vulnerability in ASKEY RTF3505VW-N1 routers by injecting ';/bin/bash' via port 80 and using tcpdump's -z flag to execute arbitrary commands, ultimately spawning a reverse shell. It requires SSH access and exploits improper handling of the -z flag in tcpdump.