CVE-2019-17270

Yachtcontrol through 2019-10-06: It's possible to perform direct Operating System commands as an unauthenticated user via the "/pages/systemcall.php?command={COMMAND}" page and parameter, where {COMMAND} will be executed and returning the results to the client. Affects Yachtcontrol webservers disclosed via Dutch GPRS/4G mobile IP-ranges. IP addresses vary due to DHCP client leasing of telco's.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

58.88% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-78

Published

2019-12-10

Updated

2024-08-05

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/155582/Yachtcontrol-2019-10-06-Remote-Code-Execution…
• https://www.exploit-db.com/exploits/47760

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17270.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2019-17264
• CVE-2019-17271
• CVE-2019-17263
• CVE-2019-17355
• CVE-2019-17240
• CVE-2019-17356