CVE-2013-3632
HIGHOpenmediavault - Access Control
Title source: ruleDescription
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotelinux
https://www.exploit-db.com/exploits/29323
metasploit
WORKING POC
EXCELLENT
rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/openmediavault_auth_cron_rce.rb
References (6)
Scores
CVSS v3
8.8
EPSS
0.7891
EPSS Percentile
99.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-264
Status
published
Products (1)
openmediavault/openmediavault
Published
Sep 29, 2014
Tracked Since
Feb 18, 2026