3 ms·

CVE-2023-1389: A New Means to Expand Botnets

2 points by jruohonen 3y ago

jruohonen 3y ago
"CVE-2023-1389 is a command injection vulnerability (Mitre ATT&CK T1055) with an 8.8 CVSS severity rating that affects TP- Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219. The command injection vulnerability is found in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before being used in a call to popen(), allowing an unauthenticated attacker to inject commands, which would be run as root, with a simple POST request." In 2023 you'd expect... Oh well.