Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cypress ctm200 command injection #19426

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Cypress ctm200 command injection #19426

wants to merge 3 commits into from
+127 −0

Commits on Aug 27, 2024

  1. Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection 

     This module exploits a command injection vulnerability in the Cypress Solutions CTM-200 version 2.7.1.
          By injecting commands via the `fw_url` POST parameter in the `ctm-config-upgrade.sh` script,
          an attacker can execute arbitrary commands as the root user.
    @0x45dd
    0x45dd committed Aug 27, 2024
    Configuration menu
    Copy the full SHA
    74943a4 View commit details
    Browse the repository at this point in the history

Commits on Aug 28, 2024

  1. Update module to include modified recommendations

    @0x45dd
    0x45dd committed Aug 28, 2024
    Configuration menu
    Copy the full SHA
    ffcf08b View commit details
    Browse the repository at this point in the history

  2. Rubocop executed. 

    1 file inspected, 40 offenses detected, 34 offenses corrected, 2 more offenses can be corrected with `rubocop -A`
    @0x45dd
    0x45dd committed Aug 28, 2024
    Configuration menu
    Copy the full SHA
    ff5e6ca View commit details
    Browse the repository at this point in the history