CVE-2020-10221: rConfig OS Command Injection Vulnerability
First published: Sun Mar 08 2020(Updated: )
lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| rConfig rConfig | <=3.9.4 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/156687/rConfig-3.93-Authenticated-Remote-Code-Execution.html
- https://cwe.mitre.org/data/definitions/78.html
- https://engindemirbilek.github.io/rconfig-3.93-rce
- https://github.com/EnginDemirbilek/EnginDemirbilek.github.io/blob/master/rconfig-3.93-rce.html
- https://nvd.nist.gov/vuln/detail/CVE-2020-10221
Frequently Asked Questions
What is the vulnerability ID for this rConfig vulnerability?
The vulnerability ID for this rConfig vulnerability is CVE-2020-10221.
What is the title of this vulnerability?
The title of this vulnerability is rConfig OS Command Injection Vulnerability.
What is the description of this vulnerability?
The rConfig lib/ajaxHandlers/ajaxAddTemplate.php file contains an OS command injection vulnerability that allows remote attackers to execute OS commands by exploiting shell metacharacters in the fileName POST parameter.
Which software is affected by this vulnerability?
The rConfig software, specifically versions up to and including 3.9.4, is affected by this vulnerability.
What is the severity of this vulnerability?
The severity of this vulnerability is critical with a CVSS score of 8.8.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/description
- agent/title
- agent/severity
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/event
- agent/first-publish-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/rconfig
- canonical/rconfig rconfig
- version/rconfig rconfig/3.9.4