CVE-2014-8741
CRITICALLexmark MarkVision Enterprise <2.1 - Path Traversal
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2014-8741.
PoCs published by Metasploit, Andrea Micalizzi, juan vazquez, including Metasploit module exploits/windows/http/lexmark_markvision_gfd_upload.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in Lexmark MarkVision Enterprise to upload arbitrary JSP files, achieving remote code execution. It first leaks the installation path via a JSP payload, then uploads and executes a malicious JSP payload.
Description
Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors.
Exploits (2)
This Metasploit module exploits a directory traversal vulnerability in Lexmark MarkVision Enterprise to upload arbitrary JSP files, achieving remote code execution. It first leaks the installation path via a JSP payload, then uploads and executes a malicious JSP payload.
This Metasploit module exploits a directory traversal vulnerability in Lexmark MarkVision Enterprise to upload arbitrary JSP files, achieving remote code execution. It first uploads a JSP to leak the installation path, then uploads a malicious JSP payload for execution.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H