The vulnerability in the rConfig network device configuration management web application for the CentOS operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s command line. This allows an attacker to execute arbitrary commands on the target system.

The vulnerability in the rConfig network device configuration management web application for the CentOS operating system relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

CVE-2020-13638

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7...

Authentication flaw

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7...

CVE-2020-13638

CVE-2020-13638 affects the rConfig product (3.9.x) where lib/crud/userprocess.php contains an authentication bypass that can lead to administrator account creation. The issue is explicitly described as bypassing authentication and enabling admin account creation, with a fixed release in 3.9.7 (up...

CVE-2020-13638

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7...

CVE-2020-13638: Improper Privilege Management

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7...

rConfig Remote Code Execution Vulnerability (CNVD-2020-60998)

rConfig is an open source network device configuration management utility . A remote code execution vulnerability exists in rConfig 3.9.4 and earlier versions. An attacker can exploit this vulnerability by sending a specially crafted GET request to lib/ajaxHandlers/ajaxAddTemplate.php or...

CVE-2020-13778

rConfig 3.9.4 and earlier allows authenticated code execution of system commands by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php...

CVE-2020-13778

rConfig 3.9.4 and earlier allows authenticated code execution of system commands by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php...

Code injection

rConfig 3.9.4 and earlier allows authenticated code execution of system commands by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php...

CVE-2020-13778

rConfig 3.9.4 and earlier allows authenticated code execution of system commands by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php...

CVE-2020-13778

CVE-2020-13778 concerns rConfig (open source network device configuration utility). Affected are rConfig versions 3.9.4 and earlier. The root cause is remote code execution: an authenticated attacker can trigger system command execution by sending a forged GET request to lib/ajaxHandlers/ajaxAddT...

CVE-2020-13778: Improper Neutralization of Special Elements used in an OS Command

rConfig 3.9.4 and earlier allows authenticated code execution of system commands by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php...

rConfig 3.9.5 - Remote Code Execution (Unauthenticated)

Exploit Title: rConfig 3.9.5 - Remote Code Execution Unauthenticated Google Dork: N/A Date: 2020-10-13 Exploit Author: Daniel Monzón stark0de Vendor Homepage: https://www.rconfig.com/ Software Link: https://www.rconfig.com/downloads/rconfig-3.9.5.zip Version: rConfig v3.9.5 Tested on: CentOS 7 x6...

rConfig SQL Injection Vulnerability (CNVD-2020-43137)

rConfig is an open source network configuration management utility . rConfig 3.9.5 version of the SQL injection vulnerability , a remote attacker can use the 'customLocation' parameter to send specially crafted SQL statements to the devices.crud.php script to exploit the vulnerability to view ,...

rConfig Directory Traversal Vulnerability

rConfig is an open source network configuration management utility . A directory traversal vulnerability exists in rConfig version 3.9.5, which can be exploited to view arbitrary files on a system by sending a request to the ajaxGetFileByPath.php script with a 'path' parameter with the sequence...

rConfig < 3.9.6 Multiple Vulnerabilities

rConfig is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

rConfig SQL Injection Vulnerability (CNVD-2020-43136)

rConfig is an open source network configuration management utility . A SQL injection vulnerability exists in rConfig version 3.9.5, which can be exploited by a remote attacker to view, add, modify or delete information in the back-end database by sending specially crafted SQL statements to the...

rConfig Code Execution Vulnerability

rConfig is an open source network configuration management utility . A code execution vulnerability exists in the search.crud.php script in rConfig version 3.9.5, which can be exploited by a remote attacker to execute arbitrary code on a system with the help of the 'nodeId' parameter...

CVE-2020-15714

rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php script using the customLocation parameter, which could allow the attacker to view, add, modify, or delete information in the back-end database...