CVE-2017-15220
CRITICALFlexense VX Search Enterprise 10.1.12 - Remote Code Execution via Buffer Overflow in Long URI
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2017-15220. PoCs published by Revnic Vasile, vasilerevnic.
AI-analyzed exploit summary This exploit targets a remote buffer overflow in VX Search Enterprise v10.1.12 via a crafted HTTP POST request. It uses an egghunter and shellcode to achieve remote code execution on the target system.
Description
Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code.
Exploits (2)
This exploit targets a remote buffer overflow in VX Search Enterprise v10.1.12 via a crafted HTTP POST request. It uses an egghunter and shellcode to achieve remote code execution on the target system.
This repository contains a functional exploit for CVE-2017-15220, a remote buffer overflow in VX Search Enterprise 10.1.12. The exploit uses a crafted HTTP POST request to trigger the vulnerability and execute arbitrary shellcode via an egghunter technique.
References (1)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H