ZEN Load Balancer Command Injection Vulnerability Allowing Remote Code Execution

A command injection vulnerability has been identified in ZEN Load Balancer versions 2.0 and 3.0-rc1. The issue resides in the 'content2-2.cgi' file, where the 'filelog' parameter is passed directly into an exec() call without proper sanitation. This vulnerability allows authenticated attackers to inject arbitrary shell commands, which are executed with root privileges, leading to remote code execution. ZEN Load Balancer is no longer supported and has been succeeded by SKUDONET CE.

Impact

Exploitation of this vulnerability allows authenticated users to execute arbitrary commands as the root user on the affected system.

Reproduction

The vulnerability can be reproduced by sending a GET request to 'index.cgi' with the 'filelog' parameter containing the injected command, such as a reverse shell payload. This request must include authorization headers for an authenticated user.