Vulnerability · Published Jul 15, 2022 · Assigned by GitHub_M
CVE-2022-31161Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload
Critical 10.0
In plain English
A critical-severity command injection in roxy-wi from hap-wi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 28.8% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)28.8%top 1.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Nuclei
Official description
Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Version 6.1.1.0 contains a patch for this issue.
Affected products (as reported)
Weakness: CWE-77, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L