CVE-2017-12478
CRITICALUnitrends UEB http api remote code execution
Title source: metasploitExploitation Summary
EIP tracks 4 public exploits for CVE-2017-12478.
PoCs published by Metasploit, Jared Arave, Cale Smith, Benny Husted, Jared Arave, h00die, including Metasploit module exploits/linux/http/ueb_api_rce.
AI-analyzed exploit summary This Metasploit module exploits an authentication bypass and command injection vulnerability in Unitrends Backup (UEB) versions before 10.0.0 and UEB < 10.1.0. It leverages SQL injection for authentication bypass and command injection via unvalidated input parameters in the API endpoints.
Description
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker could use this flaw to bypass authentication and execute arbitrary commands with root privilege on the target system.
Exploits (4)
This Metasploit module exploits an authentication bypass and command injection vulnerability in Unitrends Backup (UEB) versions before 10.0.0 and UEB < 10.1.0. It leverages SQL injection for authentication bypass and command injection via unvalidated input parameters in the API endpoints.
This Metasploit module exploits an authentication bypass and command injection vulnerability in Unitrends Backup (UB) before 10.0.0 via the api/storage endpoint. It uses a SQLi-based session token to bypass authentication and injects arbitrary commands through the hostname parameter.
This exploit leverages a SQL injection vulnerability for authentication bypass and command injection to achieve unauthenticated root remote code execution on Unitrends UEB 9.1. It sends a crafted payload to execute a reverse shell or a custom command.
This Metasploit module exploits an authentication bypass and command injection vulnerability in Unitrends Backup (UEB) versions before 10.0.0. It leverages SQL injection for authentication bypass and command injection via unvalidated input parameters in the API endpoints.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H