CVE-2022-29014

published 2022-06-09

CVE-2022-29014: A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to read arbitrary files.

Priority P2 76 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

ITW EXPLOIT VulnCheck KEV

A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to read arbitrary files.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
razer	sila_firmware	—	—

Detection & IOCs extracted from sources · hover to see the quote

url /ubus/↗

path /etc/passwd↗

other 4183f72884a98d7952d953dd9439a1d1↗

command {"jsonrpc":"2.0","id":3,"method":"call","params":["4183f72884a98d7952d953dd9439a1d1","file","read",{"path":"/etc/passwd"}]}↗

• → Exploit targets POST /ubus/ endpoint with a JSON-RPC 'file read' call; detect POST requests to /ubus/ containing 'file','read' method with a 'path' parameter. ↗
• → Content-Type header is application/x-www-form-urlencoded while the body is JSON — this mismatch is characteristic of this exploit and can be used as a detection signal. ↗
• → Successful exploitation returns HTTP 200 with passwd-file content matching 'root:.*:0:0:'; alert on such responses from router management interfaces. ↗
• → The JSON-RPC session token '4183f72884a98d7952d953dd9439a1d1' appears hardcoded in public PoC payloads; its presence in POST body to /ubus/ is a strong indicator of exploitation attempt. ↗

• · The exploit requires no authentication (PR:N, UI:N per CVSS), meaning the /ubus/ endpoint is exposed without credentials — ensure the router management interface is not internet-facing. ↗
• · Vulnerability is confirmed only on firmware version 2.0.441_api-2.0.418; detections should be scoped to that specific firmware version. ↗

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

vulncheck 7.5 HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.