CVE-2020-13160

This exploit targets a remote code execution vulnerability in AnyDesk 5.5.2 by sending a maliciously crafted UDP discovery packet containing shellcode. The payload leverages a format string vulnerability to achieve arbitrary code execution.

This Metasploit module exploits a format string vulnerability in AnyDesk's GUI (CVE-2020-13160) by sending a crafted UDP discovery packet. It achieves remote code execution by corrupting memory via format string specifiers and requires the GUI frontend to be active.