Exploitation Summary
EIP tracks 1 public exploit for CVE-2016-6598.
AI-analyzed exploit summary This is a detailed technical writeup describing multiple critical vulnerabilities in BMC Track-It! 11.4, including unauthenticated .NET remoting services leading to remote code execution and credential disclosure. The advisory explains the root cause, attack vectors, and lack of authentication in the encryption key exchange process.
Description
BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web root and achieve code execution as NETWORK SERVICE or SYSTEM.
Exploits (1)
This is a detailed technical writeup describing multiple critical vulnerabilities in BMC Track-It! 11.4, including unauthenticated .NET remoting services leading to remote code execution and credential disclosure. The advisory explains the root cause, attack vectors, and lack of authentication in the encryption key exchange process.
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H