Shell Injection Vulnerability in SaltStack Salt API for Salt Versions up to 3002
CVE-2020-16846

9.8CRITICAL

Key Information:

Vendor: Saltstack
Status: Salt
Vendor: CVE Published:; 6 November 2020

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 99%🦅 CISA Reported

What is CVE-2020-16846?

SaltStack Salt API is vulnerable to shell injection attacks due to improper handling of crafted web requests when the SSH client is enabled. An attacker can exploit this flaw by sending specially crafted requests to the Salt API, which may allow them to execute arbitrary commands on the server. This vulnerability emphasizes the need for secure coding practices and proper validation of input in web applications to prevent exploits and protect sensitive system operations.

CISA has reported CVE-2020-16846

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2020-16846 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply updates per vendor instructions.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.