Raritan PX3 PDU 4.3.14 diagnostics allow command injection
Original title: [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8)
A low-privilege authenticated diagnostics request can run OS commands in the web-service context.
0day Rubbish Research Team publicly disclosed a command-injection flaw in the Raritan PX3 PDU G4, firmware 4.3.14. A low-privilege authenticated session can turn a ping or traceroute diagnostics request into operating-system command execution in the web-service context. The team attributes this to an inverted hostname-validation return check and rates it 8.8. No fix is stated.
Unconfirmed: The snippet does not state a patch, CVE, or whether attackers have exploited it.
- The affected product is Raritan PX3 PDU G4 firmware 4.3.14.
- Ping and traceroute diagnostics are the injection points.
- Hostname validation is described as using an inverted return check.
- Raritan is identified as a Legrand company.
Impact: authenticated OS command execution in the web service
| Product | Affected |
|---|---|
| Raritan PX3 PDU G4 | 4.3.14 |
- Vendors
- Raritan
- Products
- PX3 PDU
- Organizations
- Legrand0day Rubbish Research Team
- Countries
- United States
From the original article
Posted by disclosure via Fulldisclosure on Oct 28 0day Rubbish Research Team is publicly disclosing a vulnerability in the Raritan PX3 PDU G4, firmware version 4. 3. 14, the intelligent rack power distribution unit from Raritan, a Legrand company (United States).
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.