Vulnerability Details : CVE-2019-16663
Potential exploit
An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand parameter is passed to the exec function without filtering, which can lead to command execution.
Products affected by CVE-2019-16663
- cpe:2.3:a:rconfig:rconfig:3.9.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-16663
93.95%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 100 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-16663
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.0
|
HIGH | AV:N/AC:L/Au:S/C:C/I:C/A:C |
8.0
|
10.0
|
NIST | |
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2019-16663
-
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-16663
-
https://drive.google.com/open?id=1XmR2MSMb3cKARFk3XxmPkwz6GhAP1JxL
rConfig-PostAuth-2019-09-20_11.39.23.mp4 - Google DriveExploit;Third Party Advisory
-
https://drive.google.com/open?id=1kQGmboKfwob4RwlMjnv6ER2Za1GUptOi
rConfig-postauth.png - Google DriveExploit;Third Party Advisory
-
https://gist.github.com/mhaskar/e7e454c7cb0dd9a139b0a43691e258a0
The script exploits a postauth RCE in rConfig v3.9.2 Raw ยท GitHubExploit;Third Party Advisory
-
https://shells.systems/rconfig-v3-9-2-authenticated-and-unauthenticated-rce-cve-2019-16663-and-cve-2019-16662/
rConfig v3.9.2 authenticated and unauthenticated RCE (CVE-2019-16663) and (CVE-2019-16662) - Shells.SystemsExploit;Technical Description;Third Party Advisory
-
https://rconfig.com/download
rConfig -Network Configuration ManagementProduct
Jump to