Exploitation Summary
EIP tracks 7 public exploits for CVE-2017-13696.
PoCs published by Nipun Jaswal, Chance Johnson, Nipun Jaswal & Anurag Srivastava, sickness, Chris Higgins, including Metasploit module exploits/windows/http/disk_pulse_enterprise_get.
AI-analyzed exploit summary This exploit targets a remote SEH buffer overflow in Disk Pulse Enterprise 9.9.16 via a crafted HTTP GET request. It includes a reverse shell payload generated by msfvenom and leverages a specific SEH handler to achieve remote code execution.
Description
A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component. Successful exploitation of the software will allow an attacker to gain complete access to the system with NT AUTHORITY / SYSTEM level privileges. The vulnerability lies due to improper handling and sanitization of the incoming request.
Exploits (7)
This exploit targets a remote SEH buffer overflow in Disk Pulse Enterprise 9.9.16 via a crafted HTTP GET request. It includes a reverse shell payload generated by msfvenom and leverages a specific SEH handler to achieve remote code execution.
This exploit targets Dup Scout Enterprise v9.9.14 by sending a maliciously crafted HTTP GET request to trigger a buffer overflow, leading to remote code execution via a reverse shell payload.
This exploit targets a remote SEH buffer overflow in Sync Breeze Enterprise v9.9.16 via a crafted HTTP GET request. It includes a reverse shell payload generated by msfvenom and leverages a structured exception handler (SEH) overwrite to achieve remote code execution.
This exploit targets a remote SEH buffer overflow in Disk Savvy Enterprise 9.9.14 via a crafted HTTP GET request. It includes a reverse shell payload generated by msfvenom and leverages a specific SEH handler to achieve remote code execution.
This Metasploit module exploits an SEH buffer overflow in Disk Pulse Enterprise 9.9.16 via a crafted HTTP GET request, allowing remote code execution under the NT AUTHORITY\SYSTEM account.
This Metasploit module exploits a stack buffer overflow in Dup Scout Enterprise's login functionality, allowing remote code execution with SYSTEM privileges. It targets specific versions (9.9.14 and 10.0.18) by sending a maliciously crafted POST request to the login endpoint.
This Metasploit module exploits a stack-based buffer overflow in Dup Scout Enterprise's web interface via a maliciously crafted HTTP GET request, achieving remote code execution as NT AUTHORITY\SYSTEM. It uses SEH overwrites and an egghunter for payload delivery.
References (5)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H