CVE-2020-37075
CRITICALLanSend 3.2 - Remote Code Execution via Add Computers Wizard File Import
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37075. PoCs published by gurbanli.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in LanSend 3.2 via a crafted payload file, triggering SEH overwrites to execute a reverse shell. The payload includes shellcode generated by msfvenom and a custom ROP chain to bypass protections.
Description
LanSend 3.2 contains a buffer overflow vulnerability in the Add Computers Wizard file import functionality that allows remote attackers to execute arbitrary code. Attackers can craft a malicious payload file to trigger a structured exception handler (SEH) overwrite and execute shellcode when importing computers from a file.
Exploits (1)
This exploit leverages a buffer overflow vulnerability in LanSend 3.2 via a crafted payload file, triggering SEH overwrites to execute a reverse shell. The payload includes shellcode generated by msfvenom and a custom ROP chain to bypass protections.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H