[0day-rubbish] MultiTech Conduit AEP 6.3.6 Authenticated import_config filename command injection to root RCE (7.2)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-27 04:12 UTC
Importiert: 2026-09-27 05:30 UTC
Quelle-ID: full_disc
uid_hash: 4b6d8953c4a0873177338b8d7ab8eabc92959c1edd7a74e10699df7b5c049c6e

Full Disclosure

Posted by disclosure via Fulldisclosure on Sep 26 0day Rubbish Research Team is publicly disclosing a vulnerability in MultiTech

Conduit AEP (models mtcdt / mtcdtip / mtcdtiphp), IoT gateways running mLinux on

ARM 32-bit.

Type: authenticated OS command injection (CWE-78) through the uploaded filename

of the admin-only upload_config command. The management API is served by lighttpd

on TCP 8080 and proxied to the proprietary FastCGI daemon /usr/bin/rcell_api. The

import_config handler wraps the...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss