CVE-2023-38829-NETIS-WF2409E

NETIS SYSTEMS Router WF2409E Command Injection PoC

Vulnerability Description:

The ping and traceroute functions of the NETIS SYSTEMS Router WF2409E (version V3.6.42541) are susceptible to command injection attacks. Malicious input can be crafted in the parameters of these functions through the Web admin management interface, allowing arbitrary commands to be executed with the privileges of the affected process.

PoC Steps:

1. Identify the Target:

   • Ensure you have access to the NETIS SYSTEMS Router WF2409E (version V3.6.42541) Web admin management interface.

2. Open the Ping Function:

   • Log in to the router's web interface.
   • Navigate to the "Diagnostic Tools" section.
   • Select the "Ping" function.

3. Craft Malicious Input:

   • In the "Ping" function input field, inject a command. For example:

;ls /* -al|ps

4. Execute the Command:

   • Submit the crafted input.
   • Observe the output. If the directory listing of the router's filesystem is displayed, the command injection is successful.