medium6.1Public exploit code
CVE-2018-6940
A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with CSR…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NAT32 2.2 Build 22284 - Remote Command Execution2018-02-14 · webapps · windows
Impact
A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with CSRF.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nat32 | Nat32 | Version 2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://hyp3rlinx.altervista.org/advisories/NAT32-REMOTE-COMMAND-EXECUTION-CVE-2018-6940.txt
- http://packetstormsecurity.com/files/146373/NAT32-Build-22284-Remote-Command-Execution.html
- http://www.securityfocus.com/archive/1/541777/100/0/threaded
- https://www.exploit-db.com/exploits/44033/
- http://hyp3rlinx.altervista.org/advisories/NAT32-REMOTE-COMMAND-EXECUTION-CVE-2018-6940.txt
- http://packetstormsecurity.com/files/146373/NAT32-Build-22284-Remote-Command-Execution.html
- http://www.securityfocus.com/archive/1/541777/100/0/threaded
- https://www.exploit-db.com/exploits/44033/