rConfig Remote Code Execution (CVE-2020-13778)

A remote code execution vulnerability exists in rConfig. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-13778

creationtimestamp| type| source ---|---|--- 2020-10-19 16:46:10+00:00| seen| https://t.me/cibsecurity/15367...

CVE-2020-13778

CVE-2020-13778 concerns rConfig (open source network device configuration utility). Affected are rConfig versions 3.9.4 and earlier. The root cause is remote code execution: an authenticated attacker can trigger system command execution by sending a forged GET request to lib/ajaxHandlers/ajaxAddT...