Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-7722.
PoCs published by Mehmet Ince <[email protected]>, including Metasploit module exploits/linux/ssh/solarwinds_lem_exec.
AI-analyzed exploit summary This Metasploit module exploits default SSH credentials in SolarWinds LEM to escape a restricted shell via command injection in a menu system. It delivers a Python-based reverse shell payload upon successful exploitation.
Description
In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the restricted shell.
Exploits (1)
This Metasploit module exploits default SSH credentials in SolarWinds LEM to escape a restricted shell via command injection in a menu system. It delivers a Python-based reverse shell payload upon successful exploitation.
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H