Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-36784

Description

Elsight – Elsight Halo  Remote Code Execution (RCE)Elsight Halo web panel allows us to perform connection validation.through the POST request :/api/v1/nics/wifi/wlan0/pingwe can abuse DESTINATION parameter and leverage it to remote code execution.

POC

Reference

- https://www.gov.il/en/Departments/faq/cve_advisories

Github

No PoCs found on GitHub currently.