CVE-2020-7209
CRITICAL EXPLOITED IN THE WILD NUCLEIHP LinuxKI < 6.0-2 - Remote Code Execution
Title source: llmExploitation Summary
CVE-2020-7209 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 2 public exploits from researchers including Cody Winkler, Cody Winkler, numan türle, including a Metasploit module exploits/linux/http/linuxki_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Python script exploits a command injection vulnerability in HP LinuxKI <= 6.0-1 by injecting arbitrary commands into the 'pid' parameter of the 'kivis.php' endpoint. The script sends a crafted HTTP GET request and extracts the command output from the response.
Description
LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.
Exploits (2)
This Python script exploits a command injection vulnerability in HP LinuxKI <= 6.0-1 by injecting arbitrary commands into the 'pid' parameter of the 'kivis.php' endpoint. The script sends a crafted HTTP GET request and extracts the command output from the response.
This Metasploit module exploits a command injection vulnerability in LinuxKI Toolset <= 6.01 via the 'pid' parameter in kivis.php, allowing remote code execution. It supports multiple payload types including PHP and Unix memory execution, as well as droppers.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H