CVE-2015-2284
SolarWinds Firewall Security Manager < 6.6.5 - Remote Code Execution via Client Session Handling
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-2284.
PoCs published by Metasploit, rgod, including Metasploit module exploits/windows/http/solarwinds_fsm_userlogin.
AI-analyzed exploit summary This Metasploit module exploits an authentication bypass and arbitrary file upload vulnerability in SolarWinds Firewall Security Manager 6.6.5, leading to remote code execution as SYSTEM. It abuses session manipulation and file upload functionality to deploy a malicious JSP payload.
Description
userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.
Exploits (2)
This Metasploit module exploits an authentication bypass and arbitrary file upload vulnerability in SolarWinds Firewall Security Manager 6.6.5, leading to remote code execution as SYSTEM. It abuses session manipulation and file upload functionality to deploy a malicious JSP payload.
This Metasploit module exploits an authentication bypass and file upload vulnerability in SolarWinds Firewall Security Manager 6.6.5 to achieve remote code execution. It leverages session manipulation and malicious JSP upload to execute arbitrary payloads.