OS Command Injection in Roxy-WI - CVE-2022-31137
Published: August 15, 2022 / Updated: October 25, 2024
Vulnerability identifier: #VU66484
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-31137
CWE-ID: CWE-78
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.
The vulnerability exists due to improper input validation passed via the subprocess_execute() function to "/app/options.py" file. A remote unauthenticated attacker can pass specially crafted HTTP request and execute arbitrary OS commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
Roxy-WI
How to mitigate CVE-2022-31137
Install updates from vendor's website.
Roxy-WI - update to 6.1.1.0
Links to Public Exploits and PoC-codes
- Exploit #10659 - Roxy WI v6.1.1.0 - Unauthenticated Remote Code Execution (RCE) via ssl_cert Upload (October 25, 2024)
- Exploit #10660 - Roxy WI v6.1.0.0 - Unauthenticated Remote Code Execution (RCE) (October 25, 2024)
- Exploit #10661 - Roxy WI v6.1.0.0 - Improper Authentication Control (October 25, 2024)
- Exploit #8252 - Roxy-WI Prior to 6.1.1.0 Unauthenticated Command Injection RCE (August 15, 2022)
- Exploit #8251 - Roxy-WI Remote Command Execution (August 15, 2022)