Exploitation Summary
CVE-2020-8655 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 3 public exploits.
AI-analyzed exploit summary This repository contains functional exploit code for CVE-2020-8655, which leverages a local privilege escalation (LPE) via nmap NSE script execution in EyesOfNetwork 5.1 to 5.3. The exploit chains multiple CVEs (CVE-2020-8654, CVE-2020-8655, CVE-2020-8656) to achieve remote code execution (RCE) and privilege escalation.
Description
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.
Exploits (3)
This repository contains functional exploit code for CVE-2020-8655, which leverages a local privilege escalation (LPE) via nmap NSE script execution in EyesOfNetwork 5.1 to 5.3. The exploit chains multiple CVEs (CVE-2020-8654, CVE-2020-8655, CVE-2020-8656) to achieve remote code execution (RCE) and privilege escalation.
This exploit demonstrates a multi-stage attack against EyesOfNetwork 5.3, combining SQL injection for authentication bypass, user creation, and remote code execution via a crafted NSE script for privilege escalation. The payload includes a reverse shell triggered through nmap's script execution.
This Metasploit module exploits multiple vulnerabilities in EyesOfNetwork (CVE-2020-8655) to achieve remote command execution as root. It leverages a command injection flaw in the AutoDiscovery feature, combined with privilege escalation via Nmap (executed as root by the apache user).
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H