CVE-2012-5878

published 2020-01-03

CVE-2012-5878: Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the…

Priority P2 70 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

EXPLOIT

Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (2) CSAttack.pl in frameworkgui/ or the (3) appURLPath parameter to frameworkgui/attachMobileModem.pl.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
bulbsecurity	smartphone_pentest_framework	< 0.1.3	0.1.3
bulbsecurity	smartphone_pentest_framework	0.1.2 – 0.1.4	—

Detection & IOCs extracted from sources · hover to see the quote

path frameworkgui/CSAttack.pl↗

path frameworkgui/SEAttack.pl↗

path frameworkgui/attachMobileModem.pl↗

• → CVE-2012-5878 specifically covers shell metacharacter injection via the hostingPath parameter to CSAttack.pl and SEAttack.pl, and the appURLPath parameter to attachMobileModem.pl ↗
• → Exploitation of these parameters allows arbitrary OS command execution via shell metacharacters, potentially resulting in root access ↗

• · CVE-2012-5878 affects Smartphone Pentest Framework versions 0.1.3 and 0.1.4; other versions may also be affected ↗
• · CVE-2012-5878 is a subset of the broader SPF command injection family (CVE-2012-5693 covers overlapping but distinct parameters); ensure detections target hostingPath and appURLPath specifically for this CVE ↗

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78