CVE-2020-2555
CRITICAL KEVOracle Coherence 3.7.1.0/12.1.3.0.0/12.2.1.3-4 - RCE
Title source: llmExploitation Summary
CVE-2020-2555 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021.
EIP tracks 10 public exploits from researchers including Metasploit, nu11secur1ty, Y4er, including a Metasploit module exploits/multi/misc/weblogic_deserialize_badattrval.
AI-analyzed exploit summary This Metasploit module exploits a Java deserialization vulnerability in Oracle WebLogic Server (CVE-2020-2555) by sending a crafted BadAttributeValueExpException object over the T3 protocol, leading to unauthenticated remote code execution.
Description
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Exploits (10)
This Metasploit module exploits a Java deserialization vulnerability in Oracle WebLogic Server (CVE-2020-2555) by sending a crafted BadAttributeValueExpException object over the T3 protocol, leading to unauthenticated remote code execution.
This exploit leverages CVE-2020-2555 to achieve remote code execution on Oracle WebLogic Server by sending a crafted T3 protocol payload. It reads an external payload file and embeds it into the exploit traffic.
This repository contains a functional exploit for CVE-2020-2555, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages the ReflectionExtractor gadget chain to achieve remote code execution (RCE) via the T3 protocol.
This repository contains a working exploit for CVE-2020-2555, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages a crafted payload to achieve remote code execution (RCE) via the T3 protocol.
This PoC generates a serialized payload exploiting CVE-2020-2555, a deserialization vulnerability in Oracle Coherence. It chains extractors to execute arbitrary commands (e.g., 'calc.exe') via reflection during deserialization.
The repository contains only a README.md with placeholder text and no functional exploit code or technical details. It appears to be an incomplete or abandoned proof-of-concept for CVE-2020-2555.
This repository contains a Python-based exploit for CVE-2020-2555, a deserialization vulnerability in Oracle WebLogic Server. The exploit sends a crafted T3 protocol payload to achieve remote code execution (RCE) by leveraging insecure deserialization.
This repository contains functional exploit code for CVE-2020-2555, demonstrating Java deserialization vulnerabilities in WebLogic. It includes detailed examples of serialization/deserialization, reflection, and gadget chains (e.g., CommonsCollections2/5) to achieve RCE.
This repository contains a Python-based scanner for detecting multiple WebLogic vulnerabilities, including CVE-2020-2555. It checks for the presence of vulnerabilities but does not exploit them.
This Metasploit module exploits CVE-2020-2555, a Java deserialization vulnerability in Oracle WebLogic Server. It sends a serialized BadAttributeValueExpException object over the T3 protocol to achieve unauthenticated remote code execution.
References (9)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H