Vulnerability Details CVE-2021-33358
Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the "interface", "ssid" and "wpa_passphrase" POST parameters in /hostapd, when the parameter values contain special characters such as ";" or "$()" which enables an authenticated attacker to execute arbitrary OS commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.0%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
- https://gist.github.com/omriinbar/52c000c02a6992c6ce68d531195f69cf
- https://github.com/RaspAP/raspap-webgui/blob/8f0ae3b36aa1020d21477e66010c6b2146e7c222/app/img/wifi-qr-code.php
- https://github.com/RaspAP/raspap-webgui/blob/b02660d5ff8d9faa5d3ef49778b23e832851e0f4/includes/hostapd.php
- https://gist.github.com/omriinbar/52c000c02a6992c6ce68d531195f69cf
- https://github.com/RaspAP/raspap-webgui/blob/8f0ae3b36aa1020d21477e66010c6b2146e7c222/app/img/wifi-qr-code.php
- https://github.com/RaspAP/raspap-webgui/blob/b02660d5ff8d9faa5d3ef49778b23e832851e0f4/includes/hostapd.php
Products affected by CVE-2021-33358
-
cpe:2.3:a:raspap:raspap:2.3
-
cpe:2.3:a:raspap:raspap:2.3.1
-
cpe:2.3:a:raspap:raspap:2.4
-
cpe:2.3:a:raspap:raspap:2.4.1
-
cpe:2.3:a:raspap:raspap:2.5
-
cpe:2.3:a:raspap:raspap:2.5.1
-
cpe:2.3:a:raspap:raspap:2.5.2
-
cpe:2.3:a:raspap:raspap:2.6
-
cpe:2.3:a:raspap:raspap:2.6.1
-
cpe:2.3:a:raspap:raspap:2.6.2
-
cpe:2.3:a:raspap:raspap:2.6.3
-
cpe:2.3:a:raspap:raspap:2.6.4
-
cpe:2.3:a:raspap:raspap:2.6.5