Description
Wifi-soft UniBox 是一款网络管理设备，广泛应用于酒店、咖啡厅和其他需要提供无线网络接入的场所。该漏洞存在于 /authentication/logout.php 接口中，攻击者可以通过发送特制的请求，利用命令注入漏洞在受影响的设备上执行任意命令，可能导致设备被完全控制。
Wifi-soft UniBox /authentication/logout.php 命令执行漏洞 （CVE-2025-6102）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-6102
https://cve.imfht.com/detail/CVE-2025-6102
https://www.ameeba.com/blog/cve-2025-6102-critical-os-command-injection-vulnerability-in-wifi-soft-unibox-controller/
https://dbugs.ptsecurity.com/vulnerability/PT-2025-25513
https://access.redhat.com/security/cve/cve-2025-6102
https://vuldb.com/?id.312571
https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2025/1/Command%20Injection%20Vulnerability%20in%20Wifi-soft%20UniBox%20controller-authentication_logout.pdf
https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2025-0450.html/