CyberRota Analysis
AI-GeneratedThe client_params.sh script in openNDS versions prior to 11.0.0 is susceptible to OS command injection, allowing authenticated users to execute arbitrary shell commands by manipulating HTTP GET query parameter keys. This vulnerability poses a significant risk as it can lead to unauthorized access and control over the system. Organizations using openNDS should prioritize patching this issue to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by embedding semicolons in a URL query parameter name.