critical10.0Public exploit code
CVE-2022-31161
Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Roxy WI v6.1.1.0 - Unauthenticated Remote Code Execution (RCE) via ssl_cert Upload2023-04-03 · webapps · python
Impact
Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Version 6.1.1.0 contains a patch for this issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Roxy-Wi | Roxy-Wi | before 6.1.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/171652/Roxy-WI-6.1.1.0-Remote-Code-Execution.html
- https://github.com/hap-wi/roxy-wi/releases/tag/v6.1.1.0
- https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-pg3w-8p63-x483
- http://packetstormsecurity.com/files/171652/Roxy-WI-6.1.1.0-Remote-Code-Execution.html
- https://github.com/hap-wi/roxy-wi/releases/tag/v6.1.1.0
- https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-pg3w-8p63-x483