CVE-2012-1195
Lenovo ThinkManagement Console 9.0.3 - Unauthenticated Remote Code Execution via ServerSetup Web Service File Upload
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2012-1195.
PoCs published by rgod, Andrea Micalizzi, juan vazquez, including Metasploit module exploits/windows/http/landesk_thinkmanagement_upload_asp.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in LANDesk Lenovo ThinkManagement Suite 9.0.3, allowing arbitrary file creation and remote code execution via the 'RunAMTCommand' operation in the 'ServerSetup.asmx' web service.
Description
Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via a PutUpdateFileCore command in a RunAMTCommand SOAP request, then accessing the file via a direct request to the file in the web root.
Exploits (3)
This exploit demonstrates a directory traversal vulnerability in LANDesk Lenovo ThinkManagement Suite 9.0.3, allowing arbitrary file creation and remote code execution via the 'RunAMTCommand' operation in the 'ServerSetup.asmx' web service.
This Metasploit module exploits CVE-2012-1195 in LANDesk Lenovo ThinkManagement Suite by uploading a malicious ASP script via a crafted SOAP request, executing it, and then deleting it. It leverages unauthenticated access to achieve remote code execution.
This Metasploit module exploits a vulnerability in LANDesk Lenovo ThinkManagement Suite to achieve remote command execution by uploading an ASP script containing a payload via a crafted SOAP request, executing it, and then deleting it.