RaspAP 2.8.7 Unauthenticated Command Injection Exploit

RaspAP is feature-rich wireless router software that just works on many popular Debian-based devices, including the Raspberry Pi. A Command Injection vulnerability in RaspAP versions 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands in the context of the user running...

PT-2023-22611 · Raspap · Raspap

Name of the Vulnerable Software and Affected Versions: RaspAP raspap-webgui versions 2.8.8 and earlier Description: A command injection issue allows remote attackers to execute arbitrary commands by sending a crafted POST request to the hostapd settings form. This can be achieved via the hostapd...

CVE-2023-30260

Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST request to hostapd settings form...