by Kastro
Paper/Archive/CVE-2022-31161

CVE-2022-31161

hap-wi roxy-wi — Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload

EPSS 29%CVSS 10.0
critical.is priorityof 100
50
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 98.1.981 × 2019.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Version 6.1.1.0 contains a patch for this issue.

Affected

ProductAffectedFixed inSource
roxy-wi< 6.1.1.0–CNA

Scores by source

GitHub_M (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/hap-wi/roxy-wi/security/advisories/GHSA-pg3w-8p63-x483refgithub.com/hap-wi/roxy-wi/releases/tag/v6.1.1.0refpacketstormsecurity.com/files/171652/Roxy-WI-6.1.1.0-Remote-Code-Execution.html