SB2022081514 - Multiple vulnerabilities in Roxy-WI

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2022081514

SB2022081514 - Multiple vulnerabilities in Roxy-WI

Published: August 15, 2022 Updated: April 20, 2026

Security Bulletin ID SB2022081514
CSH Severity
High
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 vulnerabilities.


1) OS Command Injection (CVE-ID: CVE-2022-31137)

CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber


The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation passed via the subprocess_execute() function to "/app/options.py" file. A remote unauthenticated attacker can pass specially crafted HTTP request and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


2) Authentication bypass using an alternate path or channel (CVE-ID: CVE-2022-31125)

CWE-ID: CWE-288 - Authentication Bypass Using an Alternate Path or Channel

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:U/U:Amber


The vulnerability allows a remote attacker to bypass authentication and access admin functionality.

The vulnerability exists due to improper authentication in critical functions when handling a specially crafted HTTP request. A remote attacker can send a specially crafted HTTP request to bypass authentication and access admin functionality.


3) Command injection (CVE-ID: CVE-2022-31126)

CWE-ID: CWE-77 - Command injection

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:U/U:Amber


The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to command injection in the ssh_command function in /app/options.py when handling a specially crafted HTTP request. A remote attacker can send a specially crafted HTTP request to execute arbitrary code.


4) Command injection (CVE-ID: CVE-2022-31161)

CWE-ID: CWE-77 - Command injection

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:U/U:Amber


The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to command injection in the upload function of /app/options.py when handling a specially crafted HTTP request for ssl_cert upload. A remote attacker can send a specially crafted HTTP request to execute arbitrary code.


Remediation

Install update from vendor's website.

References