Skip to content
OpenAdvisories

Product · hap-wi

roxy-wi

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2022-31161 Public exploit EPSS 29%

    Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload

    Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py fil…

    hap-wi roxy-wi
  • Critical 10.0
    CVE-2022-31137 Public exploit EPSS 91%

    Unauthenticated Remote Code Execution in Roxy-WI

    Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 6.1.1.0 are subject to a remote code execution vulnerability. System commands can be run remotely via the subprocess_execute function without processing t…

    hap-wi roxy-wi
  • Critical 10.0
    CVE-2022-31126 Public exploit EPSS 53%

    Unauthenticated Remote Code Execution in Roxy-wi

    Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to code execution by sending a specially crafted HTTP request to /app/options.py file. Thi…

    hap-wi roxy-wi
  • Critical 10.0
    CVE-2022-31125 Public exploit EPSS 20%

    Authentication Bypass in Roxy-wi

    Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTT…

    hap-wi roxy-wi