← volver
CVE-2018-7600criticalbajo ataqueransomwareCWE-20

CVE-2018-7600

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 9.8epss 100%
de la publicación al arma1 días
Publicada en NVD29 mar
1ª PoC+1d
metasploit28 mar
CISA KEV+1315d
probabilidad de explotación
100%top 1% de las CVE
explotación observada
síCISA + VulnCheck
102 exploit(s) público(s)
Acción exigida por CISAplazo federal: 2022-05-03

Apply updates per vendor instructions.

Versiones

Afectadas
composer/drupal/core >= 7.0, < 7.58; composer/drupal/core >= 8.0, < 8.3.9; composer/drupal/core >= 8.4.0, < 8.4.6; composer/drupal/core >= 8.5.0, < 8.5.1; composer/drupal/drupal >= 7.0, < 7.58; composer/drupal/drupal >= 8.0, < 8.3.9
Corregidas en
composer/drupal/core 7.58; composer/drupal/core 8.3.9; composer/drupal/core 8.4.6; composer/drupal/core 8.5.1; composer/drupal/drupal 7.58; composer/drupal/drupal 8.3.9
Investigado y redactado con IA a partir del advisory del fabricante y análisis públicos, con las fuentes citadas. Verifica siempre la versión corregida en el advisory oficial antes de actuar.
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1
PoCs públicas encontradas — 102✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44448exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44449exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44482githubgithub.com/dreadlocked/Drupalgeddon2★ 600githubgithub.com/a2u/CVE-2018-7600★ 354githubgithub.com/pimps/CVE-2018-7600★ 141githubgithub.com/g0rx/CVE-2018-7600-Drupal-RCE★ 114githubgithub.com/firefart/CVE-2018-7600★ 71githubgithub.com/lorddemon/drupalgeddon2★ 11githubgithub.com/r3dxpl0it/CVE-2018-7600★ 9githubgithub.com/rabbitmask/CVE-2018-7600-Drupal7★ 8githubgithub.com/zhzyker/CVE-2018-7600-Drupal-POC-EXP★ 8githubgithub.com/dr-iman/CVE-2018-7600-Drupal-0day-RCE★ 7githubgithub.com/thehappydinoa/CVE-2018-7600★ 7githubgithub.com/jirojo2/drupalgeddon2★ 5githubgithub.com/ludy-dev/drupal8-REST-RCE★ 4githubgithub.com/dwisiswant0/CVE-2018-7600★ 4githubgithub.com/sl4cky/CVE-2018-7600★ 4githubgithub.com/shellord/CVE-2018-7600-Drupal-RCE★ 4githubgithub.com/knqyf263/CVE-2018-7600★ 3githubgithub.com/sl4cky/CVE-2018-7600-Masschecker★ 3githubgithub.com/Hestat/drupal-check★ 2githubgithub.com/drugeddon/drupal-exploit★ 1githubgithub.com/Meraj1312/cve-2018-7600-drupalgeddon2-lab★ 1githubgithub.com/Damian972/drupalgeddon-2★ 1githubgithub.com/muhammedkayag/CVE-2018-7600★ 1githubgithub.com/0xAJ2K/CVE-2018-7600★ 1githubgithub.com/4l13n-DN/POC-CVE-2018-7600★ 1githubgithub.com/shellord/Drupalgeddon-Mass-Exploiter★ 1githubgithub.com/r0lh/CVE-2018-7600★ 0githubgithub.com/raytran54/CVE-2018-7600★ 0githubgithub.com/tpdlshdmlrkfmcla/CVE-2018-7600.★ 0githubgithub.com/Dowonkwon/drupal-cve-2018-7600-poc★ 0githubgithub.com/rafaelcaria/drupalgeddon2-CVE-2018-7600★ 0githubgithub.com/MoriartyPuth-Labs/DC1-Lab★ 0githubgithub.com/soch4n/CVE-2018-7600★ 0githubgithub.com/happynote3966/CVE-2018-7600★ 0githubgithub.com/cved-sources/cve-2018-7600★ 0githubgithub.com/madneal/codeql-scanner★ 0githubgithub.com/ynsmroztas/drupalhunter★ 0githubgithub.com/ruthvikvegunta/Drupalgeddon2★ 0githubgithub.com/RB4C/drupalgeddon2-CVE-2018-7600★ 0githubgithub.com/vphnguyen/ANM_CVE-2018-7600★ 0githubgithub.com/anldori/CVE-2018-7600★ 0githubgithub.com/M-Abid34/CVE-2018-7600★ 0githubgithub.com/rajaabdullahnasir/CVE-2018-7600-Remote-Code-Execution★ 0githubgithub.com/xxxTectationxxx/CVE-2018-7600★ 0githubgithub.com/SyedGhufranRaza/CVE-2018-7600-Remote-Code-Execution★ 0githubgithub.com/nika0x38/CVE-2018-7600★ 0githubgithub.com/tea-celikik/Drupal-Exploit-Lab★ 0githubgithub.com/bixiPRO/Drupalgeddon2-CVE-2018-7600★ 0githubgithub.com/erman-bolukbasi/web-penetration-drupal★ 0githubgithub.com/Dungsocool/CVE-2018-7600★ 0githubgithub.com/nayem-m/drupalgeddon2-cli★ 0vulncheckvulncheck.com/xdb/4fd5c25b6975no verificadovulncheckvulncheck.com/xdb/15a6ea88eaf7no verificadovulncheckvulncheck.com/xdb/b46f747a0508no verificadovulncheckvulncheck.com/xdb/ddf40e5b5eb7no verificadovulncheckvulncheck.com/xdb/b2ad4ba89de6no verificadovulncheckvulncheck.com/xdb/020a6d58ef57no verificadovulncheckvulncheck.com/xdb/62fa544a97dcno verificadovulncheckvulncheck.com/xdb/d1a4b59d693cno verificadovulncheckvulncheck.com/xdb/1df8d0e011f7no verificadovulncheckvulncheck.com/xdb/6210c8efb8c0no verificadovulncheckvulncheck.com/xdb/e6cf9763451bno verificadovulncheckvulncheck.com/xdb/85edc13d35bano verificadovulncheckvulncheck.com/xdb/e07a02c6c680no verificadovulncheckvulncheck.com/xdb/8fd9c335c455no verificadocve_referencewww.exploit-db.com/exploits/44448/no verificadovulncheckvulncheck.com/xdb/ca334bf953fcno verificadovulncheckvulncheck.com/xdb/18441ff73017no verificadovulncheckvulncheck.com/xdb/e104ec642cd7no verificadovulncheckvulncheck.com/xdb/275e04b88ebeno verificadocve_referencewww.exploit-db.com/exploits/44482/no verificadovulncheckvulncheck.com/xdb/fe354a439c20no verificadovulncheckvulncheck.com/xdb/49097e1fdbbbno verificadovulncheckvulncheck.com/xdb/6f85920c0670no verificadovulncheckvulncheck.com/xdb/ccc6bd53fd2bno verificadovulncheckvulncheck.com/xdb/d4d58bdc2983no verificadovulncheckvulncheck.com/xdb/36d1b1902163no verificadovulncheckvulncheck.com/xdb/464985de7dedno verificadovulncheckvulncheck.com/xdb/2cb73a6f32d0no verificadocve_referencewww.exploit-db.com/exploits/44449/no verificadovulncheckvulncheck.com/xdb/06e3c416c2d9no verificadovulncheckvulncheck.com/xdb/9b1b9ea4c421no verificadovulncheckvulncheck.com/xdb/e00c4f0f2628no verificadovulncheckvulncheck.com/xdb/c878141c1b57no verificadovulncheckvulncheck.com/xdb/70444c690e44no verificadovulncheckvulncheck.com/xdb/c7637bac32d5no verificadovulncheckvulncheck.com/xdb/a91d4aaab05cno verificadovulncheckvulncheck.com/xdb/2c29ea901266no verificadovulncheckvulncheck.com/xdb/8bb18d909af8no verificadovulncheckvulncheck.com/xdb/0f9b4b5c3fddno verificadovulncheckvulncheck.com/xdb/f6840124d312no verificadovulncheckvulncheck.com/xdb/53767629a229no verificadovulncheckvulncheck.com/xdb/4649e1e3eb49no verificadovulncheckvulncheck.com/xdb/0bef2689fa42no verificadovulncheckvulncheck.com/xdb/d1958c41a3f7no verificadovulncheckvulncheck.com/xdb/2cf109ac0290no verificadovulncheckvulncheck.com/xdb/4699ae4dcab1no verificadovulncheckvulncheck.com/xdb/e5040e1a4b4eno verificadovulncheckvulncheck.com/xdb/3d1688d5ab25no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://badpackets.net/over-100000-drupal-websites-vulnerable-to-drupalgeddon-2-cve-2018-7600/https://blog.appsecco.com/remote-code-execution-with-drupal-core-sa-core-2018-002-95e6ecc0c714https://github.com/a2u/CVE-2018-7600https://github.com/g0rx/CVE-2018-7600-Drupal-RCEhttps://greysec.net/showthread.php?tid=2912&pid=10561https://groups.drupal.org/security/faq-2018-002https://lists.debian.org/debian-lts-announce/2018/03/msg00028.htmlhttps://research.checkpoint.com/uncovering-drupalgeddon-2/https://twitter.com/arancaytar/status/979090719003627521https://twitter.com/RicterZ/status/979567469726613504https://twitter.com/RicterZ/status/984495201354854401https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7600