Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-3292. PoCs published by Metasploit.
AI-analyzed exploit summary This Metasploit module exploits CVE-2015-3292 by abusing the Java Debug Wire Protocol (JDWP) to execute arbitrary Java code remotely. It leverages the lack of authentication in exposed JDWP services to inject and execute payloads.
Description
The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.
Exploits (1)
This Metasploit module exploits CVE-2015-3292 by abusing the Java Debug Wire Protocol (JDWP) to execute arbitrary Java code remotely. It leverages the lack of authentication in exposed JDWP services to inject and execute payloads.