EDB-49869
PoCIPFire 2.25 - Remote Code Execution (Authenticated)
view exploit source exploit_dbtype webappsauthor Mücahit Saratarpublished 2021-05-17catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-33393US | high8.8OT high | Exploit | ||
lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged account, which could pote… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan