Metasploit Weekly Wrap-Up 06/28/2024

Unauthenticated Command Injection in Netis Router

This week's Metasploit release includes an exploit module for an unauthenticated command injection vulnerability in the Netis MW5360 router which is being tracked as CVE-2024-22729. The vulnerability stems from improper handling of the password parameter within the router's web interface which allows for command

command command injection command injection vulnerability cve cve-2024 exploit handling injection interface metasploit metasploit weekly wrapup parameter password release router unauthenticated vulnerability web web interface week weekly wrap-up