CVE-2018-6892
CRITICALCloudMe Sync < 1.10.9 - Unauthenticated Remote Buffer Overflow via Port 8888
Title source: llmExploitation Summary
EIP tracks 10 public exploits for CVE-2018-6892.
PoCs published by Metasploit, hyp3rlinx, boku, including Metasploit module exploits/windows/misc/cloudme_sync.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in CloudMe Sync v1.10.9 via a maliciously crafted TCP packet. It leverages SEH overwrites to achieve remote code execution on Windows 7 SP1 x86.
Description
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.
Exploits (10)
This Metasploit module exploits a stack-based buffer overflow in CloudMe Sync v1.10.9 via a maliciously crafted TCP packet. It leverages SEH overwrites to achieve remote code execution on Windows 7 SP1 x86.
This exploit demonstrates an unauthenticated remote buffer overflow in CloudMe Sync <= v1.10.9 by sending a malicious payload to TCP port 8888, overwriting EIP and achieving arbitrary code execution via SEH overwrite.
This exploit leverages a buffer overflow in CloudMe 1.11.2 to bypass DEP and ASLR using ROP chains, ultimately executing arbitrary commands via msvcrt.system to add a new administrator user.
This exploit targets a buffer overflow vulnerability in CloudMe Sync v1.11.2, leveraging a ROP chain to bypass DEP and execute arbitrary shellcode. The payload is designed to trigger a reverse shell or execute calc.exe as a proof-of-concept.
This Metasploit module exploits a stack buffer overflow in CloudMe 1.8.x/1.9.x, bypassing DEP via ROP chain to achieve remote code execution. It targets Windows systems by sending a crafted payload to port 8888.
This is a Golang port of a buffer overflow exploit for CloudMe 1.11.2. It leverages a stack-based overflow to execute reverse shell shellcode, targeting a vulnerable TCP service on port 8888.
This is a functional exploit for CVE-2018-6892, a buffer overflow vulnerability in CloudMe Sync. It sends a crafted payload with shellcode to trigger remote code execution via a TCP connection to port 8888.
This is a functional exploit for CVE-2018-6892, targeting a buffer overflow vulnerability in CloudMe Sync <= 1.10.9. It bypasses DEP using ROP chains and executes a reverse shell payload.
This is a functional exploit for CVE-2018-6892, demonstrating a buffer overflow with SEH and DEP bypass in CloudMe Sync 1.10.9 on Windows 10 x64. It uses a ROP chain and shellcode to achieve remote code execution.
This Metasploit module exploits a stack-based buffer overflow in CloudMe Sync v1.10.9 via a crafted TCP payload. It leverages SEH overwrites and NOP sleds to achieve remote code execution on Windows 7 SP1 x86.
References (10)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H