Helmholz: REX 100 vulnerable to OS command injection
view advisory published 2024-07-03
There exists a vulnerability in all REX 100 devices with firmware <= 2.2.11 that allows an authenticated attacker to execute arbitrary system commands via GET requests. Update: 03.07.2024 3:30pm In section Reported by Sebastian Dietz (CyberDanube) was added.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-5672US | — | — | ||
A high privileged remote attacker can execute arbitrary system commands via GET requests due to improper neutralization of special elements used in an OS command. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationFirmware <=2.2.11 installed on REX 100
As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.
- FixedFirmware <=2.2.11 installed on REX 100
Update to latest version: 2.2.13
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan