cve/2019/CVE-2019-12272.md

CVE-2019-12272

Description

In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability.

POC

Reference

No PoCs from references.

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/20142995/sectool
• https://github.com/BloodyOrangeMan/DVRF
• https://github.com/HACHp1/LuCI_RCE_exp
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/nevercodecorrect/lede-17.01.3
• https://github.com/roguedream/lede-17.01.3