[0day-rubbish] Cambium cnMatrix EX3024F 6.2.1-r4 SSL CSR COMMON_NAME command injection to root RCE (7.2)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-27 04:12 UTC
Importiert: 2026-09-27 04:21 UTC
Quelle-ID: full_disc
uid_hash: dfcf0664e0296969dcf88cbd887f8b0ec12f73bf1f16d50fc63279c0f65b3e07

Full Disclosure

Posted by disclosure via Fulldisclosure on Sep 26 0day Rubbish Research Team is publicly disclosing a vulnerability in the Cambium

cnMatrix EX3024F managed switch, firmware 6.2.1-r4.

Type: OS command injection (CWE-78, with CWE-20 bearing on it because

percent-decoding is the only processing applied; CWE-250/CWE-269 bear on

remediation priority). The COMMON_NAME form field submitted to

POST /iss/specific/ssl_digitalcert.html is extracted by HttpGetValuebyName,

percent-decoded by...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss