93948vdb entry
http://www.securityfocus.com/bid/93948 CVE-2016-5063
MEDIUM
BMC BladeLogic 8.3.00.64 - Remote Command Execution
Record summary
CVE-2016-5063 has a selected CVSS score of 5.3 (medium); EIP currently links 2 catalogued exploits and 1 repository PoC.
Description
The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors.
Description source: CVE List
Exploitation context
Proofs of concept
3Catalogued exploits
ExploitDBBMC BladeLogic 8.3.00.64 - Remote Command ExecutionExploitDB exploitby Paul TaylorNot analyzed1 file
ExploitDBBMC BladeLogic RSCD Agent 8.3.00.64 - Windows Users DisclosureExploitDB exploitby Paul TaylorNot analyzed1 file
Repository PoCs
GitHubbao7uo/bmc_bladelogicRepository PoCby bao7uoStars: 20Not analyzed7 files
References
5docs.bmc.comConfirmation
https://docs.bmc.com/docs/display/bsa87/Notification+of+Windows+RSCD+Agent+vulnerability+in+BMC+Server+Automation+CVE-2016-5063 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2016-5063 43902exploit
https://www.exploit-db.com/exploits/43902 43934exploit
https://www.exploit-db.com/exploits/43934