An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured (and virtually unrestricted) web console to attack the underlying OS (Raspberry Pi) running this software, and execute commands on the system (including ones for uploading of files and execution of code).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-08-24T19:14:58
Updated: 2024-08-04T15:19:07.873Z
Reserved: 2020-08-21T00:00:00
Link: CVE-2020-24572
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-08-24T20:15:10.300
Modified: 2020-09-01T19:05:04.063
Link: CVE-2020-24572
Redhat
No data.