CVE-2024-6127
CRITICALPowerShellEmpire Arbitrary File Upload (Skywalker)
Title source: metasploitExploitation Summary
EIP tracks 1 public exploit for CVE-2024-6127.
PoCs published by Spencer McIntyre, Erik Daguerre, ACE-Responder, Takahiro Yokoyama, including Metasploit module exploits/linux/http/empire_skywalker.
AI-analyzed exploit summary This Metasploit module exploits CVE-2024-6127, an arbitrary file upload vulnerability in PowerShellEmpire (BC Security) or the original Empire server, allowing an attacker to write and execute payloads on the target system via a cron job.
Description
BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit this vulnerability over HTTP by acting as a normal agent, completing all cryptographic handshakes, and then triggering an upload of payload data containing a malicious path.
Exploits (1)
This Metasploit module exploits CVE-2024-6127, an arbitrary file upload vulnerability in PowerShellEmpire (BC Security) or the original Empire server, allowing an attacker to write and execute payloads on the target system via a cron job.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H