Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-1806. PoCs published by James Forshaw.
AI-analyzed exploit summary This is a .NET Remoting Service exploit tool targeting CVE-2014-1806 and CVE-2014-4149, allowing remote command execution, file transfer, and directory listing on vulnerable Windows systems. It supports both TCP and IPC channels with various options for authentication and serialization methods.
Description
The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which allows remote attackers to execute arbitrary code via vectors involving malformed objects, aka "TypeFilterLevel Vulnerability."
Exploits (1)
This is a .NET Remoting Service exploit tool targeting CVE-2014-1806 and CVE-2014-4149, allowing remote command execution, file transfer, and directory listing on vulnerable Windows systems. It supports both TCP and IPC channels with various options for authentication and serialization methods.