CVE-2024-1800
CRITICALProgress Telerik Report Server < 10.0.24.130 - Remote Code Execution via Insecure Deserialization
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2024-1800.
PoCs published by sinsinology, gh-ost00, SinSinology, Soroush Dalili, Unknown, Spencer McIntyre, including Metasploit module exploits/windows/http/telerik_report_server_deserialization.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-4358 and CVE-2024-1800, targeting Progress Telerik Report Server. The exploit chains an authentication bypass with a deserialization vulnerability to achieve pre-authenticated remote code execution.
Description
In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.
Exploits (3)
This repository contains a functional exploit for CVE-2024-4358 and CVE-2024-1800, targeting Progress Telerik Report Server. The exploit chains an authentication bypass with a deserialization vulnerability to achieve pre-authenticated remote code execution.
This repository contains a functional exploit for CVE-2024-4358, targeting Telerik Report Server with an authentication bypass and deserialization RCE. The script automates user registration, token acquisition, and payload delivery to achieve remote code execution.
This Metasploit module exploits CVE-2024-4358 (auth bypass) and CVE-2024-1800 (.NET deserialization) to achieve RCE on Telerik Report Server. It creates an admin account, uploads a malicious report, and triggers command execution as NT AUTHORITY\SYSTEM.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H