CVE-2020-24719

CRITICAL

Erlang Port Mapper Daemon Cookie RCE

Title source: github.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-24719 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.

Description

Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by exchanging a shared secret (aka "magic cookie"). There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlang node and run OS level commands on the system running the Erlang node. Affects version: 6.5.1. Fix version: 6.6.0.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

MetasploitErlang Port Mapper Daemon Cookie RCEMetasploit exploitby Daniel Mende +1 moreNot analyzed1 file

Ruby

Metasploit
PoC details

References

2