CVE-2022-36784

Elsight – Elsight Halo Remote Code Execution RCE Elsight Halo web panel allows us to perform connection validation. through the POST request : /api/v1/nics/wifi/wlan0/ping we can abuse DESTINATION parameter and leverage it to remote code execution...

CVE-2022-36784 Elsight – Elsight Halo Remote Code Execution (RCE)

Elsight – Elsight Halo Remote Code Execution RCE Elsight Halo web panel allows us to perform connection validation. through the POST request : /api/v1/nics/wifi/wlan0/ping we can abuse DESTINATION parameter and leverage it to remote code execution...

CVE-2022-36784

CVE-2022-36784 affects Elsight Halo: the web panel’s POST endpoint /api/v1/nics/wifi/wlan0/ping can be abused via the DESTINATION parameter to achieve remote code execution . Multiple connected sources describe a network-exposed RCE with high impact (confidentiality, integrity, and availability a...