CVE-2009-0695
Wyse Device Manager 4.7.x - Unauthenticated Remote Command Execution via hagent.exe
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-0695.
PoCs published by kf, it.solunium, including Metasploit module exploits/multi/wyse/hagent_untrusted_hsdata.
AI-analyzed exploit summary This Metasploit module exploits CVE-2009-0695 in Wyse Rapport Hagent by impersonating a legitimate server, tricking the target into downloading and executing a malicious payload via FTP. It supports both Windows and Linux targets.
Description
hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action.
Exploits (3)
This Metasploit module exploits CVE-2009-0695 in Wyse Rapport Hagent by impersonating a legitimate server, tricking the target into downloading and executing a malicious payload via FTP. It supports both Windows and Linux targets.
This Metasploit auxiliary module exploits CVE-2009-0695 in the Wyse Rapport Hagent service to remotely power off Wyse machines by sending a crafted request to port 80. It verifies vulnerability by checking for a specific response ('&00').
This Metasploit module exploits Wyse Rapport Hagent by impersonating a legitimate server, tricking the target into downloading and executing a payload via FTP. It supports both Windows and Linux targets.