CVE-2020-8657
CRITICAL KEV NUCLEIEyesOfNetwork 5.1-5.3 AutoDiscovery Target Command Execution
Title source: metasploitExploitation Summary
CVE-2020-8657 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 1 public exploit from researchers including Metasploit. A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits multiple vulnerabilities in EyesOfNetwork (CVE-2020-8654, CVE-2020-8655, CVE-2020-8656, CVE-2020-8657) to achieve remote command execution as root. It leverages a command injection in the AutoDiscovery feature, combined with privilege escalation via Nmap's sudo permissions, and includes authentication bypass methods via hardcoded API keys and SQL injection.
Description
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.
Exploits (1)
This Metasploit module exploits multiple vulnerabilities in EyesOfNetwork (CVE-2020-8654, CVE-2020-8655, CVE-2020-8656, CVE-2020-8657) to achieve remote command execution as root. It leverages a command injection in the AutoDiscovery feature, combined with privilege escalation via Nmap's sudo permissions, and includes authentication bypass methods via hardcoded API keys and SQL injection.
Nuclei Templates (1)
html:"EyesOfNetwork"
title="EyesOfNetwork"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H