Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-10201. PoCs published by Javier Bernardo. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Ncomputing vSpace Pro v10 and v11, allowing remote attackers to read arbitrary files outside the web root via crafted URLs with traversal patterns. The PoC includes example URLs and an Nmap command to verify the vulnerable port.
Description
An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11. It is possible to read arbitrary files outside the root directory of the web server. This vulnerability could be exploited remotely by a crafted URL without credentials, with .../ or ...\ or ..../ or ....\ as a directory-traversal pattern to TCP port 8667.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Ncomputing vSpace Pro v10 and v11, allowing remote attackers to read arbitrary files outside the web root via crafted URLs with traversal patterns. The PoC includes example URLs and an Nmap command to verify the vulnerable port.
Nuclei Templates (1)
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N