| tiêu đề | Netcore POWER15AX V3.0.0.6938 Command Injection |
|---|
| Mô tả | A command injection vulnerability exists in Netcore POWER15AX router firmware V3.0.0.6938. The setTools function in /bin/netis.cgi implements incomplete input filtering that only blocks 4 characters (space, pipe, semicolon, ampersand) but does not filter command substitution syntax like $(command) or backticks. This allows attackers to bypass the filter and execute arbitrary OS commands with root privileges through the diagnostic tool interface.
The vulnerability was discovered through static analysis using IDA Pro. The decompiled code shows user input from the "IpAddr" parameter is directly concatenated into a command string via sprintf() and executed via system() without proper validation.
Full technical analysis, IDA screenshots, and theoretical PoC available at: https://github.com/fakervsbln/netcore-power15ax-cve
|
|---|
| Nguồn | ⚠️ https://github.com/fakervsbln/netcore-power15ax-cve |
|---|
| Người dùng | Lastxuan (UID 96269) |
|---|
| Đệ trình | 10/03/2026 07:21 (cách đây 7 các tháng) |
|---|
| Kiểm duyệt | 25/03/2026 15:39 (15 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 353146 [Netcore Power 15AX đến 3.0.0.6938 Diagnostic Tool Interface /bin/netis.cgi setTools IpAddr nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|