← back
CVE-2018-6941

CVE-2018-6941

EPSS 3.6%
A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with XSS.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/146402/NAT32-Build-22284-Remote-Command-Execution-CSRF.htmlunverifiedcve_referencewww.exploit-db.com/exploits/44034/unverifiedexploitdbwww.exploit-db.com/exploits/44034unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://hyp3rlinx.altervista.org/advisories/NAT32-REMOTE-COMMAND-EXECUTION-CSRF-CVE-2018-6941.txthttp://packetstormsecurity.com/files/146402/NAT32-Build-22284-Remote-Command-Execution-CSRF.htmlhttps://www.exploit-db.com/exploits/44034/