Linksys WVBR0-25 User-Agent Command Execution
The Linksys WVBR0-25 Wireless Video Bridge, used by DirecTV to connect wireless Genie cable boxes to the Genie DVR, is vulnerable to OS command injection in version < 1.0.41 of the web management portal via the User-Agent header. Authentication is not required to exploit this vulnerability.
Module Name
exploit/linux/http/linksys_wvbr0_user_agent_exec_noauth
Authors
- HeadlessZeke
References
Targets
- Automatic
Platforms
- unix
Architectures
- cmd
Reliability
Development
Module Options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/linux/http/linksys_wvbr0_user_agent_exec_noauth
msf exploit(linksys_wvbr0_user_agent_exec_noauth) > show targets
...targets...
msf exploit(linksys_wvbr0_user_agent_exec_noauth) > set TARGET <target-id>
msf exploit(linksys_wvbr0_user_agent_exec_noauth) > show options
...show and set options...
msf exploit(linksys_wvbr0_user_agent_exec_noauth) > exploit