CVE-2022-39986 Scanner

RaspAP is an open-source software solution that allows users to easily set up a wireless access point on Raspberry Pi devices, providing a web-based interface for managing Wi-Fi networking functions. It is widely used by hobbyists, educators, and professionals for creating Wi-Fi hotspots, offering features like SSID broadcasting, password management, and DHCP server configuration. RaspAP is praised for its simplicity and flexibility, enabling quick deployment of Wi-Fi networks for a variety of applications such as home automation, educational labs, and small office setups.

The CVE-2022-39986 vulnerability in RaspAP versions 2.8.0 to 2.8.7 allows unauthenticated attackers to perform command injection attacks. This flaw is due to improper validation of user input in the cfg_id parameter within specific PHP files. Attackers can exploit this vulnerability to execute arbitrary commands on the underlying operating system without needing any authentication, making it a critical security issue.

Specifically, the vulnerability resides in the handling of the cfg_id parameter in the RaspAP web interface. The affected PHP files fail to sanitize or validate the input before passing it to system-level functions, such as exec() or shell_exec(). This allows an attacker to inject malicious commands by crafting a specially crafted HTTP request to the vulnerable endpoint, leading to remote code execution.

If exploited, an attacker can gain full control over the Raspberry Pi device running RaspAP. This includes the ability to install malware, exfiltrate sensitive data, pivot to other devices on the network, or disrupt Wi-Fi services. Given the CVSS score of 9.8, this vulnerability poses a severe risk to the integrity and security of networks utilizing RaspAP.