CVE-2022-36784

Publication date

2022-11-17 22:27:54

Family

INCD

State

PUBLISHED

Description

Elsight – Elsight Halo  Remote Code Execution (RCE) Elsight Halo web panel allows us to perform connection validation. through the POST request : /api/v1/nics/wifi/wlan0/ping we can abuse DESTINATION parameter and leverage it to remote code execution.