CVE-2018-15442
HIGHCisco Webex Meetings <33.6.4 & Productivity Tools 32.6.0-33.0.6 OS Command Injection
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2018-15442.
PoCs published by Metasploit, Ron Bowes <[email protected]>, Ron <[email protected]>, including Metasploit module auxiliary/admin/smb/webexec_command.
AI-analyzed exploit summary This Metasploit module exploits CVE-2018-15442 by leveraging authenticated SMB access to execute arbitrary payloads on Windows systems. It uses WebExec for command execution and supports various techniques like PowerShell and WMI.
Description
A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools.
Exploits (5)
This Metasploit module exploits CVE-2018-15442 by leveraging authenticated SMB access to execute arbitrary payloads on Windows systems. It uses WebExec for command execution and supports various techniques like PowerShell and WMI.
This Metasploit module exploits a flaw in the WebEx service (CVE-2018-15442) to achieve local privilege escalation by writing a malicious executable to a writable directory and leveraging the service's SYSTEM-level permissions to execute it.
This Metasploit module exploits CVE-2018-15442 in Cisco WebEx client software to execute arbitrary commands as System via SMB. It leverages the WebExec utility to send commands to a remote host, optionally forcing GUI creation via WMIC.
This Metasploit module exploits authenticated SMB access to execute arbitrary payloads on Windows systems, similar to psexec but allowing non-guest accounts by default. It uses WebExec for command execution and supports cmdstager for payload delivery.
This Metasploit module exploits a local privilege escalation vulnerability in the WebEx service by writing a malicious executable to a writable directory and leveraging the service's SYSTEM-level permissions to execute it. The exploit checks for service existence, validates architecture, and attempts to start the service to trigger payload execution.
References (5)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H