Moxa MAR-2000 Executer path allows authenticated command injection
Original title: [0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 command injection in the Executer program activation path (7.2)
A stored configuration field is built into the shell command that launches an operator program as the model process.
0day Rubbish Research Team disclosed a separate command-injection flaw in Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909. An authenticated administrator can convert one stored configuration field into arbitrary command execution as the model process. The Executer model builds the launch command of an operator program as a shell command. The post names neither a CVE nor a fixed release.
Unconfirmed: No in-the-wild exploitation or vendor fix is stated.
- This disclosure concerns the Executer program activation path.
- The named image is FWR_MAR2000_V1.0_Build_15010909.
- The described attacker is an authenticated administrator.
- It was posted to Full Disclosure on October 28.
Impact: authenticated command execution as the model process
| Product | Affected |
|---|---|
| Moxa Inc. MAR-2000 | FWR_MAR2000_V1.0_Build_15010909 |
- Vendors
- Moxa Inc.
- Products
- MAR-2000
- Organizations
- 0day Rubbish Research Team
From the original article
Posted by disclosure via Fulldisclosure on Oct 28 0day Rubbish Research Team is publicly disclosing a vulnerability in the Moxa MAR-2000 series industrial 4G/LTE cellular router, firmware image FWR_MAR2000_V1. 0_Build_15010909, from Moxa Inc. (Taiwan).
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.