CVE-2019-16662: OS Command Injection
First published: Mon Oct 28 2019(Updated: )
An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| rConfig rConfig | =3.9.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/154999/rConfig-3.9.2-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/155186/rConfig-3.9.2-Command-Injection.html
- https://drive.google.com/file/d/1bTpTn4-alJ8qGCEATLq-oVM6HbhE65iY/view?usp=sharing
- https://drive.google.com/open?id=1OXI5cNuwWqc6y-7BgNCfYHgFPK2cpvnu
- https://gist.github.com/mhaskar/ceb65fa4ca57c3cdccc1edfe2390902e
- https://rconfig.com/download
- https://shells.systems/rconfig-v3-9-2-authenticated-and-unauthenticated-rce-cve-2019-16663-and-cve-2019-16662/
Frequently Asked Questions
What is the vulnerability ID for this issue in rConfig 3.9.2?
The vulnerability ID for this issue in rConfig 3.9.2 is CVE-2019-16662.
What is the severity of CVE-2019-16662?
The severity of CVE-2019-16662 is critical with a CVSS score of 9.8.
How can an attacker exploit CVE-2019-16662?
An attacker can exploit CVE-2019-16662 by sending a GET request to ajaxServerSettingsChk.php with a malicious rootUname parameter, which allows for direct execution of system commands.
How can I mitigate the risk of CVE-2019-16662 in rConfig 3.9.2?
To mitigate the risk of CVE-2019-16662, it is recommended to update rConfig to a version that is not affected by this vulnerability and apply any patches or fixes provided by the vendor.
Are there any additional references related to CVE-2019-16662?
Yes, additional references related to CVE-2019-16662 can be found at the following URLs: [URL 1], [URL 2], [URL 3]
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/rconfig
- canonical/rconfig rconfig
- version/rconfig rconfig/3.9.2