CVE-2017-11610
HIGH EXPLOITED IN THE WILD NUCLEISupervisor XML-RPC Authenticated Remote Code Execution
Title source: metasploitExploitation Summary
CVE-2017-11610 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 5 public exploits from researchers including Metasploit, yaunsky, Dungsocool, including a Metasploit module exploits/linux/http/supervisor_xmlrpc_exec.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits an authenticated XML-RPC vulnerability in Supervisor (CVE-2017-11610) to achieve remote code execution by sending a malicious XML-RPC request to supervisord, which runs arbitrary shell commands as the supervisord user.
Description
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.
Exploits (5)
This Metasploit module exploits an authenticated XML-RPC vulnerability in Supervisor (CVE-2017-11610) to achieve remote code execution by sending a malicious XML-RPC request to supervisord, which runs arbitrary shell commands as the supervisord user.
This repository contains a Python-based exploit for CVE-2017-11610, a remote command execution vulnerability in Supervisor versions 3.1.2 to 3.3.2. The exploit leverages XML-RPC method calls to execute arbitrary commands via the `supervisor.supervisord.options.warnings.linecache.os.system` method.
This repository contains a functional Python exploit for CVE-2017-11610, which targets a vulnerability in Supervisor's XML-RPC interface. The exploit leverages namespace traversal to access the `os.system` function, allowing arbitrary command execution on the target system.
This is a standalone Python exploit for CVE-2017-11610, targeting Supervisor versions 3.0a1 to 3.3.2. It achieves unauthenticated remote code execution via XML-RPC endpoint manipulation, delivering a reverse shell payload.
This Metasploit module exploits CVE-2017-11610, an authenticated RCE vulnerability in Supervisor (3.0a1-3.3.2) via malicious XML-RPC requests. It leverages the `supervisor.supervisord.options.warnings.linecache.os.system` method to execute arbitrary commands.
Nuclei Templates (1)
http.title:"Supervisor Status" || http.title:"supervisor status"
title="supervisor status"
References (12)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H