CVE-2015-2279

cgi_test.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers to execute arbitrary OS commands via shell metacharacters after an "&" (ampersand) in the write_mac write_pid, write_msn, write_tan, or write_hdv parameter.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

17.62% chance of exploitation in the next 30 days, 97th percentile

Published

2017-07-24

Updated

2024-08-06

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/132585/AirLive-Remote-Command-Injection.html
• http://seclists.org/fulldisclosure/2015/Jul/29
• https://www.coresecurity.com/advisories/airlive-multiple-products-os-command-injection

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/37532

References

• CVE Record
• NVD entry

Related

• CVE-2015-2275
• CVE-2015-2280
• CVE-2015-2269
• CVE-2015-2281
• CVE-2015-2248
• CVE-2015-2284