CVE-2018-6892
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 93%
da publicação à arma2 dias
Publicada no NVD11 de fev.
1ª PoC+2d
metasploit17 de jan.
probabilidade de exploração
93%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
16 exploit(s) público(s)
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 16✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44027exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44175exploitdbwww.exploit-db.com/exploits/46250não verificadoexploitdbwww.exploit-db.com/exploits/45197não verificadogithubgithub.com/latortuga71/CVE-2018-6892-Golang★ 1githubgithub.com/manojcode/CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass★ 0githubgithub.com/manojcode/-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass★ 0githubgithub.com/crypticq/CLOUDME_B0F★ 0cve_referencepacketstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.htmlnão verificadocve_referencepacketstormsecurity.com/files/159327/CloudMe-1.11.2-Buffer-Overflow.htmlnão verificadocve_referencewww.exploit-db.com/exploits/45197/não verificadocve_referencepacketstormsecurity.com/files/158716/CloudMe-1.11.2-SEH-Buffer-Overflow.htmlnão verificadocve_referencewww.exploit-db.com/exploits/44175/não verificadocve_referencewww.exploit-db.com/exploits/44027/não verificadocve_referencewww.exploit-db.com/exploits/46250/não verificadocve_referencewww.exploit-db.com/exploits/48840não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://hyp3rlinx.altervista.org/advisories/CLOUDME-SYNC-UNAUTHENTICATED-REMOTE-BUFFER-OVERFLOW.txthttp://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.htmlhttp://packetstormsecurity.com/files/158716/CloudMe-1.11.2-SEH-Buffer-Overflow.htmlhttp://packetstormsecurity.com/files/159327/CloudMe-1.11.2-Buffer-Overflow.htmlhttps://blogs.securiteam.com/index.php/archives/3669https://www.exploit-db.com/exploits/44027/https://www.exploit-db.com/exploits/44175/https://www.exploit-db.com/exploits/45197/https://www.exploit-db.com/exploits/46250/https://www.exploit-db.com/exploits/48840