Description
An unauthenticated command injection vulnerability exists in WePresent WiPG-1000 firmware versions prior to 2.2.3.0, due to improper input handling in the undocumented /cgi-bin/rdfs.cgi endpoint. The Client parameter is not sanitized before being passed to a system call, allowing an unauthenticated remote attacker to execute arbitrary commands as the web server user.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
WePresent (Barco) WiPG-1000
Default version status: unknown
0 to < 2.2.3.0affected
References
- https://www.redguard.ch/advisories/wepresent-wipg1000.txt ↗
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/wipg1000_cmd_injection.rb ↗
- https://www.exploit-db.com/exploits/41935 ↗
- https://www.vulncheck.com/advisories/we-present-wi-pg-1000-unauthenticated-command-injection ↗