CVE-2014-125113
CRITICALDell KACE K1000 <5.4.76849-5.5.90547 - File Upload
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2014-125113.
PoCs published by Metasploit, Bradley Austin (steponequit), bcoles, including Metasploit module exploits/unix/http/dell_kace_k1000_upload.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated file upload vulnerability in Dell KACE K1000, allowing arbitrary command execution as the 'www' user and privilege escalation to root via the 'KSudoClient::RunCommandWait' function.
Description
An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.90547 in the download_agent.php endpoint. An attacker can upload arbitrary PHP files to a temporary web-accessible directory, which are later executed through inclusion in backend code that loads files under attacker-controlled paths.
Exploits (2)
This Metasploit module exploits an unauthenticated file upload vulnerability in Dell KACE K1000, allowing arbitrary command execution as the 'www' user and privilege escalation to root via the 'KSudoClient::RunCommandWait' function.
This Metasploit module exploits an unauthenticated file upload vulnerability in Dell KACE K1000 (CVE-2014-125113) to achieve remote code execution as the 'www' user and escalates privileges to root via the 'KSudoClient::RunCommandWait' function. It uploads a malicious PHP file to a writable directory and executes it to trigger the payload.
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N