← CVE Intelligence

CVE-2022-31126

Unauthenticated Remote Code Execution in Roxy-wi PUBLISHED

Description (CNA)

Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to code execution by sending a specially crafted HTTP request to /app/options.py file. This affects Roxy-wi versions before 6.1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.

Affected (CNA)

Vendor / productVersions
hap-wi / roxy-wiaffected < 6.1.1.0

CWE

CWE-74

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.