PT-2023-2140 · Roxy-Wi · Roxy-Wi

Aidaho12 + 1 · Published 2023-02-15 · Updated 2023-03-19 · CVE-2023-25804

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Roxy-WI versions prior to 6.3.5.0

Description The issue is related to a limited path traversal vulnerability in the Roxy-WI web interface, which can be exploited by a remote attacker to gain unauthorized access to protected information. This vulnerability allows an SSH key to be saved into an unintended location, such as the /tmp folder, using a payload like ../../../../../tmp/test111 dev.

Recommendations For versions prior to 6.3.5.0, update to version 6.3.5.0 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable web interface until the update is applied. Avoid using the vulnerable functionality to save SSH keys to unintended locations until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2023-01879

CVE-2023-25804

GHSA-69J6-CRQ8-RRHV

Affected Products

Roxy-Wi

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25804.json · Exploit
• 🔥 https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-69j6-crq8-rrhv · Exploit
• https://bdu.fstec.ru/vul/2023-01879 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-25804 · Security Note
• https://osv.dev/vulnerability/CVE-2023-25804 · Vendor Advisory
• https://vuldb.com/ru/?id.223144 · Note
• https://t.me/cibsecurity/60074 · Telegram Post