CVE-2010-0103
Energizer DUO USB - Remote Code Execution via TCP Port 7777
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-0103.
PoCs published by Metasploit, hdm, including Metasploit module auxiliary/scanner/backdoor/energizer_duo_detect.
AI-analyzed exploit summary This Metasploit module exploits a backdoor in the Energizer DUO USB battery charger software to upload and execute arbitrary payloads on infected systems. It communicates with the trojan on port 7777, using encoded commands to write and execute a malicious executable.
Description
UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777.
Exploits (3)
This Metasploit module exploits a backdoor in the Energizer DUO USB battery charger software to upload and execute arbitrary payloads on infected systems. It communicates with the trojan on port 7777, using encoded commands to write and execute a malicious executable.
This Metasploit auxiliary module scans for instances of the Energizer DUO trojan horse software by sending encoded commands to port 7777 and parsing responses to detect compromised systems. It does not exploit a vulnerability but identifies trojaned installations.
This Metasploit module exploits a backdoor in the Energizer DUO USB battery charger software (Arucer.dll) to achieve remote code execution. It communicates with the trojan on port 7777, uploads a malicious executable, and executes it.