critical9.8
CVE-2017-9807
An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices.
Impact
An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an eval() call on the contents of the "key" HTTP GET parameter. This allows an unauthenticated remote attacker to execute arbitrary Python code or OS commands via api/saveconfig.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openwebif Project | Openwebif | through 1.2.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2017/10/02/4
- http://www.securityfocus.com/bid/99232
- https://census-labs.com/news/2017/10/02/e2openplugin-openwebif-saveconfig-remote-code-execution/
- https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/620
- http://www.openwall.com/lists/oss-security/2017/10/02/4
- http://www.securityfocus.com/bid/99232
- https://census-labs.com/news/2017/10/02/e2openplugin-openwebif-saveconfig-remote-code-execution/
- https://github.com/E2OpenPlugins/e2openplugin-OpenWebif/issues/620