Exploitation Summary
EIP tracks 2 public exploits for CVE-2015-7709.
PoCs published by Metasploit, including Metasploit module exploits/multi/misc/arkeia_agent_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2015-7709, an authentication bypass in Western Digital Arkeia's 'arkeiad' daemon (TCP port 617), allowing arbitrary command execution with root/SYSTEM privileges via the ARKFS_EXEC_CMD operation.
Description
The arkeiad daemon in the Arkeia Backup Agent in Western Digital Arkeia 11.0.12 and earlier allows remote attackers to bypass authentication and execute arbitrary commands via a series of crafted requests involving the ARKFS_EXEC_CMD operation.
Exploits (2)
This Metasploit module exploits CVE-2015-7709, an authentication bypass in Western Digital Arkeia's 'arkeiad' daemon (TCP port 617), allowing arbitrary command execution with root/SYSTEM privileges via the ARKFS_EXEC_CMD operation.
This Metasploit module exploits CVE-2015-7709 in Western Digital Arkeia by bypassing authentication and executing arbitrary commands via the ARKFS_EXEC_CMD operation. It targets the arkeiad daemon on TCP port 617 and supports multiple platforms.