RULE(RULE ID:338013)

Rule General Information
Release Date: 2024-05-14
Rule Name: Razer Sila Gaming Router Remote Code Execution Vulnerability (CVE-2022-29013)
Severity:
CVE ID:
Rule Protection Details
Description: A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference: ExploitDB:50865
https://packetstormsecurity.com/files/166684/Razer-Sila-2.0.418-Command-Injection.html
https://www2.razer.com/ap-en/desktops-and-networking/razer-sila
Solutions
Please contact the software vendor to update the software patch.