← back
CVE-2017-9757

CVE-2017-9757

EPSS 38.5%
Vexday Risk Score
30Low
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 38.5%KEV nãoPoC —Nuclei —Metasploit simPatch —
Lifecycle
09 Jun 2017Metasploit module available
19 Jun 2017Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. This can be exploited directly by authenticated users, or through CSRF.
Affected products
n/a · n/a
References
https://twitter.com/0x09AL/status/873860385652256768https://www.exploit-db.com/exploits/42149/http://www.securityfocus.com/bid/99173