CyberRota Analysis
AI-GeneratedThe webgjc web_robot versions 2.4.0, 2.5.0, and 2.8.0 are vulnerable to OS command injection through the controller_listen/controller_recover function in the py/web.py file, allowing remote attackers to execute arbitrary commands. Organizations using these versions should prioritize remediation, as the exploit has been publicly disclosed and could be actively exploited. Immediate action is recommended to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in webgjc web_robot 2.4.0/2.5.0/2.8.0. The affected element is the function controller_listen/controller_recover of the file py/web.py. The manipulation of the argument case_name leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.