Description (CNA)
The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system() function. By submitting a specially crafted username containing shell metacharacters, an unauthenticated attacker with network access to the device can escape the command context and execute arbitrary commands with root privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Weidmueller Interface / IE-SR-2TX-WL | affected 1.52 before 1.57 |
| Weidmueller Interface / IE-SR-2TX-WL-4G-EU | affected 1.67 before 1.74 |
| Weidmueller Interface / IE-SR-2TX-WL-4G-US-V | affected 1.67 before 1.74 |
CWE
CWE-78
References
ADP enrichment
No English description supplied.
No references supplied.