CVEs-PoC/2017/CVE-2017-11321.md

CVE-2017-11321

Description

The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command.

POC

Reference

• https://sysdream.com/news/lab/2017-09-29-cve-2017-11321-ucopia-wireless-appliance-5-1-8-restricted-shell-escape/
• https://sysdream.com/news/lab/2017-09-29-cve-2017-11321-ucopia-wireless-appliance-5-1-8-restricted-shell-escape/
• https://www.exploit-db.com/exploits/42937/
• https://www.exploit-db.com/exploits/42937/

Github

• https://github.com/tnpitsecurity/CVEs