CVE-2018-7886
HIGHCloudMe Sync 1.11.0 - Unauthenticated Buffer Overflow via Local Port 8888
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2018-7886. PoCs published by Prasenjit Kanti Paul.
AI-analyzed exploit summary This exploit leverages a local buffer overflow in CloudMe Sync v1.11.0 by sending a crafted payload to port 8888, overwriting the EIP with a JMP ESP address and executing a reverse shell payload.
Description
An issue was discovered in CloudMe 1.11.0. An unauthenticated local attacker that can connect to the "CloudMe Sync" client application listening on 127.0.0.1 port 8888 can send a malicious payload causing a buffer overflow condition. This will result in code execution, as demonstrated by a TCP reverse shell, or a crash. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-6892.
Exploits (1)
This exploit leverages a local buffer overflow in CloudMe Sync v1.11.0 by sending a crafted payload to port 8888, overwriting the EIP with a JMP ESP address and executing a reverse shell payload.
References (2)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H