CVE-2021-42847
CRITICALManageEngine ADAudit Plus Authenticated File Write RCE
Title source: metasploitExploitation Summary
EIP tracks 1 public exploit for CVE-2021-42847.
PoCs published by Moon, Erik Wynter, including Metasploit module exploits/windows/http/manageengine_adaudit_plus_authenticated_rce.
AI-analyzed exploit summary This Metasploit module exploits an authenticated file write vulnerability (CVE-2021-42847) in ManageEngine ADAudit Plus to achieve remote code execution by creating a custom alert profile with a malicious script. It supports versions prior to 7006 and handles both direct payload insertion (pre-7004) and arbitrary file write (7004-7005).
Description
Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files.
Exploits (1)
This Metasploit module exploits an authenticated file write vulnerability (CVE-2021-42847) in ManageEngine ADAudit Plus to achieve remote code execution by creating a custom alert profile with a malicious script. It supports versions prior to 7006 and handles both direct payload insertion (pre-7004) and arbitrary file write (7004-7005).
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H