exploit/linux/http/ipfire_pakfire_exec

weaponized

IPFire 2.25 Core Update 156 and Prior pakfire.cgi Authenticated RCE

view exploit source metasploittype exploitpublished 2021-05-17catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-33393US	high8.8OT high	59.3% (99th)	Exploit	2021-06-09
lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged account, which could pote…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.