CVE-2013-6810
EMC Connectrix Manager - Remote Code Execution via Servlet File Upload
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-6810. PoCs published by James Fitts.
AI-analyzed exploit summary This Metasploit module exploits a file upload vulnerability in EMC Connectrix Manager Converged Network Edition (CMCNE) <= 11.2.1. It uploads a malicious JSP payload via the FileUploadController servlet, achieving remote code execution in the context of the server user.
Description
The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Network Advisor, and possibly other products, allows remote attackers to execute arbitrary code by using a servlet to upload an executable file.
Exploits (2)
This Metasploit module exploits a file upload vulnerability in EMC Connectrix Manager Converged Network Edition (CMCNE) <= 11.2.1. It uploads a malicious JSP payload via the FileUploadController servlet, achieving remote code execution in the context of the server user.
This Metasploit module exploits a file upload vulnerability in EMC Connectrix Manager Converged Network Edition (CMCNE) <= 11.2.1, allowing an attacker to upload a malicious JSP file to the remote file system and achieve remote code execution.