PT-2022-20576 · Haproxy+3 · Haproxy+3

Aidaho12 + 1 · Published 2022-07-15 · Updated 2025-05-26 · CVE-2022-31161

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Roxy-WI versions prior to 6.1.1.0

Description Roxy-WI is a Web interface for managing HAProxy, Nginx, and Keepalived servers. The system command can be run remotely via the subprocess execute function without processing the inputs received from the user in the /app/options.py file.

Recommendations For versions prior to 6.1.1.0, update to version 6.1.1.0 to resolve the issue. As a temporary workaround, consider disabling the subprocess execute function until a patch is available. Restrict access to the /app/options.py file to minimize the risk of exploitation.

Exploit

Fix

RCE

Unrestricted File Upload

Code Injection

Command Injection

Weakness Enumeration

CWE-434

CWE-94

CWE-77

Related Identifiers

CVE-2022-31161

GHSA-PG3W-8P63-X483

Affected Products

Haproxy

Keepalived

Nginx

Roxy-Wi

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31161.json · Exploit
• 🔥 https://exploit-db.com/exploits/51228 · Exploit
• https://osv.dev/vulnerability/CVE-2022-31161 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31161 · Security Note
• https://github.com/hap-wi/roxy-wi/releases/tag/v6.1.1.0 · Note
• https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-pg3w-8p63-x483 · Note
• https://twitter.com/pdnuclei_bot/status/1926880992595239402 · Twitter Post
• https://t.me/cvenotify/47455 · Telegram Post
• https://t.me/cibsecurity/46374 · Telegram Post
• http://packetstormsecurity.com/files/171652/Roxy-WI-6.1.1.0-Remote-Code-Execution.html · Note
• https://t.me/cvenotify/33604 · Telegram Post