Exploitation Summary
EIP tracks 3 public exploits for CVE-2014-8687.
PoCs published by Metasploit, OJ Reeves, including Metasploit module exploits/linux/http/seagate_nas_php_exec_noauth.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated remote command execution vulnerability in Seagate Business NAS devices via a local file inclusion vulnerability in the CodeIgniter session cookie. It manipulates the session cookie to gain admin privileges and then injects a PHP payload to achieve remote code execution.
Description
Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging use of a static encryption key to create session tokens.
Exploits (3)
This Metasploit module exploits an unauthenticated remote command execution vulnerability in Seagate Business NAS devices via a local file inclusion vulnerability in the CodeIgniter session cookie. It manipulates the session cookie to gain admin privileges and then injects a PHP payload to achieve remote code execution.
This exploit targets a pre-authentication remote code execution vulnerability in Seagate Business NAS devices. It leverages a session manipulation flaw to execute arbitrary commands as root, either by installing a webshell or generating an admin session cookie.
This Metasploit module exploits an unauthenticated remote command execution vulnerability in Seagate Business NAS devices via a local file inclusion flaw in the CodeIgniter session cookie's language parameter. It decrypts the session cookie, modifies it to gain admin privileges, and injects a PHP payload to achieve RCE.
References (6)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H