CVE-2024-41637: Privilege Escalation in RaspAP
Summary
CVE-2024-41637: RaspAP allows an attacker to escalate privileges. Affects billz/raspap-webgui versions < 3.1.4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
RaspAP is a web-based management interface for wireless access points on the Raspberry Pi. It provides a user-friendly interface to configure and monitor various network settings. The package 'billz/raspap-webgui' is a popular implementation of RaspAP. However, versions prior to 3.1.5 are vulnerable to privilege escalation.
Vulnerability Detail
The vulnerability in RaspAP allows an attacker to escalate privileges. The 'www-data' user, which is the user running the web server, has write access to the 'restapi.service' file. Additionally, this user possesses Sudo privileges to execute critical commands without requiring a password. This combination of write access and elevated privileges can be exploited by an attacker to gain unauthorized access and execute arbitrary commands with elevated privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can manually modify the permissions of the 'restapi.service' file to restrict write access for the 'www-data' user. Additionally, it is advisable to review and modify the Sudo configuration to require a password for critical commands executed by the 'www-data' user.
Conclusion
RaspAP versions prior to 3.1.5 are vulnerable to privilege escalation. Attackers can exploit this vulnerability to gain unauthorized access and execute arbitrary commands with elevated privileges. It is crucial to update to the latest version of RaspAP and review the necessary permissions and configurations to mitigate this risk.
See every vulnerability recorded for billz/raspap-webgui →
FAQ
RaspAP is a web-based management interface for wireless access points on the Raspberry Pi. It provides an easy-to-use interface to configure and monitor network settings.
This vulnerability allows an attacker to escalate privileges, potentially gaining unauthorized access and executing arbitrary commands with elevated privileges.
To fix this vulnerability, update RaspAP to version 3.1.5 or later. This update removes the unnecessary write access and tightens the Sudo configuration.
Yes, as a temporary workaround, you can manually modify the permissions of the 'restapi.service' file and review the Sudo configuration to require a password for critical commands.
You can find more information about this vulnerability in the GitHub Security Advisory GHSA-q623-2j2j-23jj.
Related vulnerabilities
Recent vulnerabilities recorded for billz/raspap-webgui.
