PT-2023-2140 · Roxy-Wi · Roxy-Wi

Aidaho12 + 1 · Publicado 2023-02-15 · Atualizado 2023-03-19 · CVE-2023-25804

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Roxy-WI versions prior to 6.3.5.0

Description The issue is related to a limited path traversal vulnerability in the Roxy-WI web interface, which can be exploited by a remote attacker to gain unauthorized access to protected information. This vulnerability allows an SSH key to be saved into an unintended location, such as the /tmp folder, using a payload like ../../../../../tmp/test111 dev.

Recommendations For versions prior to 6.3.5.0, update to version 6.3.5.0 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable web interface until the update is applied. Avoid using the vulnerable functionality to save SSH keys to unintended locations until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2023-01879

CVE-2023-25804

GHSA-69J6-CRQ8-RRHV

Produtos afetados

Roxy-Wi

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25804.json · Exploit
• 🔥 https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-69j6-crq8-rrhv · Exploit
• https://vuldb.com/ru/?id.223144 · Nota
• https://bdu.fstec.ru/vul/2023-01879 · Nota de Segurança
• https://t.me/cibsecurity/60074 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-25804 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-25804 · Aviso do Fabricante