Alexander Philiotis

Name of the Vulnerable Software and Affected Versions: Lucee versions 5.x through 6.x Description: An authenticated remote code execution issue exists in Lucee's administrative interface due to insecure design in the scheduled task functionality. An administrator with access to /lucee/admin/web.cfm can configure a scheduled job to retrieve a remote .cfm file from an attacker-controlled server, which is written to the Lucee webroot and executed with the privileges of the Lucee service account. Because Lucee does not enforce integrity checks, path restrictions, or execution controls for scheduled task fetches, this feature can be abused to achieve arbitrary code execution. Recommendations: For Lucee versions 5.x through 6.x, restrict access to the scheduled task functionality and monitor configurations to minimize the risk of exploitation. As a temporary workaround, consider disabling the scheduled task feature until a patch is available. Avoid using the scheduled task functionality to retrieve remote files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TP-Link TL-WR940N versions 3.16.9 and earlier **Description** The issue is related to a buffer overflow in the handling of the `dnsserver1` and `dnsserver2` parameters at the "/userRpm/Wan6to4TunnelCfgRpm.htm" API endpoint. This allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root user. A proof-of-concept exploit is available, demonstrating the risk of remote code execution. **Recommendations** For TP-Link TL-WR940N versions 3.16.9 and earlier, consider disabling access to the "/userRpm/Wan6to4TunnelCfgRpm.htm" API endpoint until a patch is available. Restrict the use of the `dnsserver1` and `dnsserver2` parameters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.