PT-2023-6139 · Raspap · Raspap

Published 2023-08-01 · Updated 2023-10-16 · CVE-2022-39987

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RaspAP versions 2.8.0 through 2.9.2

Description The issue is related to a command injection vulnerability. It allows an authenticated attacker to execute arbitrary OS commands as root via the entity POST parameters in the /ajax/networking/get wgkey.php endpoint. This can be achieved by sending a specially crafted POST request.

Recommendations For RaspAP versions 2.8.0 through 2.9.2, consider restricting access to the /ajax/networking/get wgkey.php endpoint to minimize the risk of exploitation. As a temporary workaround, avoid using the entity parameter in the affected endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2023-06845

CVE-2022-39987

GHSA-7R88-WJHJ-JR8M

Affected Products

Raspap

References · 12

• 🔥 https://medium.com/@ismael0x00/multiple-vulnerabilities-in-raspap-3c35e78809f2 · Exploit
• https://github.com/RaspAP/raspap-webgui/blob/master/ajax/networking/get_wgkey.php · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-39987 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39987 · Security Note
• https://bdu.fstec.ru/vul/2023-06845 · Security Note
• https://osv.dev/vulnerability/GHSA-7r88-wjhj-jr8m · Vendor Advisory
• https://github.com/RaspAP/raspap-webgui · Note
• https://github.com/RaspAP/raspap-webgui/releases/tag/2.9.5 · Note
• https://github.com/RaspAP/raspap-webgui/pull/1395 · Note
• https://github.com/RaspAP/raspap-webgui/commit/e87e7d1d3a61617430851f2a040379de1ff3dd9d · Note
• https://t.me/cibsecurity/67519 · Telegram Post
• https://medium.com/%40ismael0x00/multiple-vulnerabilities-in-raspap-3c35e78809f2 · Note