Netwin SurgeFTP Remote Command Execution Vulnerability

A remote command execution vulnerability has been identified in Netwin SurgeFTP versions through 23c8. This issue resides in the web-based administrative console, where authenticated users can execute arbitrary system commands by sending crafted POST requests to 'surgeftpmgr.cgi'. The exploitation of this vulnerability could lead to full remote code execution on the underlying system.

Impact

Exploitation of this vulnerability allows for authenticated users to execute arbitrary commands on the server, potentially leading to full system compromise.

Reproduction

To reproduce this vulnerability, an authenticated user must send a POST request to '/cgi/surgeftpmgr.cgi' with the 'authent_process' parameter containing the command to be executed. This can be done using a tool like Metasploit, which has a module available for this exploitation.