Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-34119.
PoCs published by R-73eN, R-73eN, bcoles, including Metasploit module auxiliary/scanner/misc/easycafe_server_fileaccess.
AI-analyzed exploit summary This exploit leverages a lack of request validation in EasyCafe Server to read arbitrary files by sending a crafted payload to port 831. The server does not verify if the request was initiated via UDP, allowing unauthorized file retrieval.
Description
A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831. The server listens for a custom protocol where opcode 0x43 can be used to request arbitrary files by absolute path. If the file exists and is accessible, its content is returned without authentication. This flaw allows attackers to retrieve sensitive files such as system configuration, password files, or application data.
Exploits (2)
This exploit leverages a lack of request validation in EasyCafe Server to read arbitrary files by sending a crafted payload to port 831. The server does not verify if the request was initiated via UDP, allowing unauthorized file retrieval.
This Metasploit module exploits a file retrieval vulnerability in EasyCafe Server by sending a crafted packet (opcode 0x43) to port 831/TCP, allowing arbitrary file reads. It includes functionality to download and store the retrieved file.
References (3)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N