CVE-2020-7350: falha de média gravidade em Rapid7 Metasploit Framework
Metasploit Framework Plugin Libnotify Command Injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 6.1epss 5.0%
da publicação à armano mesmo dia
Publicada no NVD22 de abr.
metasploit4 de mar.
Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the libnotify plugin accepts untrusted user-supplied data via a remote computer's hostname or service name. An attacker can create a specially-crafted hostname or service name to be imported by Metasploit from a variety of sources and trigger a command injection on the operator's terminal. Note, only the Metasploit Framework and products that expose the plugin system is susceptible to this issue -- notably, this does not include Rapid7 Metasploit Pro. Also note, this vulnerability cannot be triggered through a normal scan operation -- the attacker would have to supply a file that is processed with the db_import command.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
Produtos afetados
Rapid7 · Metasploit FrameworkCVEs relacionadas — Rapid7 Metasploit Framework
No mesmo produto, das mais perigosas para as menos.
CVE-2019-5645HIGHRapid7 Metasploit HTTP Handler Denial of ServiceEPSS 49.2%CVE-2019-5624HIGHRapid7 Metasploit Framework Zip Import Directory TraversalEPSS 2.8%CVE-2020-7385HIGHMetasploit Framework 'drb_remote_codeexec' code executionEPSS 1.8%CVE-2020-7376HIGHRapid7 Metasploit Framework Relative Path Traversal in enum_osx moduleEPSS 1.1%CVE-2020-7377HIGHRapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump moduleEPSS 1.1%CVE-2026-87690HIGHMetasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code ExecutionEPSS 0.4%