Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-10047.
PoCs published by Metasploit, AkaStep, bcoles, including Metasploit module exploits/windows/http/miniweb_upload_wbem.
AI-analyzed exploit summary This Metasploit module exploits a file upload vulnerability in MiniWeb HTTP server (build 300) to achieve remote code execution by uploading a malicious executable and a MOF file to trigger WMI execution. It targets Windows systems before Vista.
Description
An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote attackers to upload arbitrary files to the server’s filesystem. By abusing the upload handler and crafting a traversal path, an attacker can place a malicious .exe in system32, followed by a .mof file in the WMI directory. This triggers execution of the payload with SYSTEM privileges via the Windows Management Instrumentation service. The exploit is only viable on Windows versions prior to Vista.
Exploits (2)
This Metasploit module exploits a file upload vulnerability in MiniWeb HTTP server (build 300) to achieve remote code execution by uploading a malicious executable and a MOF file to trigger WMI execution. It targets Windows systems before Vista.
This Metasploit module exploits an arbitrary file upload vulnerability in MiniWeb HTTP server (build 300) to achieve remote code execution by uploading a malicious executable and a MOF file to trigger WMI execution.
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N