Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
RustFly 2.0.0 Command Injection via UDP Remote Control
Vulnerability Description
RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted hex-encoded payloads containing system commands to execute arbitrary operations on the target system, including reverse shell establishment and command execution.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Bixat RustFly 操作系统命令注入漏洞
Vulnerability Description
Bixat RustFly是摩洛哥Bixat公司的一个跨平台远程控制工具。 Bixat RustFly 2.0.0版本存在操作系统命令注入漏洞，该漏洞源于远程UI控制机制对UDP端口5005接收的十六进制编码指令清理不当，可能导致命令注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A