vulnerability

rConfig Install Command Execution

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
10	(AV:N/AC:L/Au:N/C:C/I:C/A:C)	Oct 28, 2019	Feb 3, 2021	Feb 4, 2021

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Oct 28, 2019

Added

Feb 3, 2021

Modified

Feb 4, 2021

Description

An issue was discovered in rConfig allowing an attacker to directly execute system commands by sending a GET request to ajaxServerSettingsChk.php

This check requires the Metasploit Remote Check Service to be enabled on Scan Engines. Please see the Metasploit Remote Check Service documentation for instructions on how to enable this functionality.

Solution

rconfig-update-latest-sol

References

METASPLOIT-exploit/unix/webapp/rconfig_install_cmd_exec
CVE-2019-16662
https://attackerkb.com/topics/CVE-2019-16662

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today