CVE-2014-5210
AlienVault OSSIM < 4.7.0 - Remote Code Execution via SOAP remote_task or get_license Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-5210. PoCs published by James Fitts.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in Alienvault OSSIM's av-centerd service via the get_license function. It constructs a malicious SOAP request to execute arbitrary commands, including disabling the firewall and delivering a payload.
Description
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805.
Exploits (1)
This Metasploit module exploits a command injection vulnerability in Alienvault OSSIM's av-centerd service via the get_license function. It constructs a malicious SOAP request to execute arbitrary commands, including disabling the firewall and delivering a payload.