nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-15657 CVE-2018-15657
HIGH
SureMDM < 2018-11 Patch - Local / Remote File Inclusion
Record summary
CVE-2018-15657 has a selected CVSS score of 7.3 (high); EIP currently links 1 catalogued exploit.
Description
An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSureMDM < 2018-11 Patch - Local / Remote File InclusionExploitDB exploitby Digital InterruptionNot analyzed1 file
References
3research.digitalinterruption.com
https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software 46305exploit
https://www.exploit-db.com/exploits/46305