CVE-2018-6328
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 65%
from disclosure to weapon2 days
Published on NVDMar 14
1st PoC+2d
metasploitAug 8
exploitation probability
65%top 1% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes.
Affected products
n/a · n/apublic PoCs found — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/45559exploitdbwww.exploit-db.com/exploits/44297unverifiedcve_referencewww.exploit-db.com/exploits/44297/unverifiedcve_referencewww.exploit-db.com/exploits/45559/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.