CVE-2018-6481

Опубликовано: 27 фев. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9124.

Ссылки

http://packetstormsecurity.com/files/146541/Disk-Savvy-Enterprise-10.4.18-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://gist.github.com/DanielRTeixeira/5af55e62340e4df38e0c411eb0cc3dca
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/44156/
Exploit
Third Party Advisory
VDB Entry
https://www.youtube.com/watch?v=Ed7QXICSgeY
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/146541/Disk-Savvy-Enterprise-10.4.18-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://gist.github.com/DanielRTeixeira/5af55e62340e4df38e0c411eb0cc3dca
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/44156/
Exploit
Third Party Advisory
VDB Entry
https://www.youtube.com/watch?v=Ed7QXICSgeY
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:flexense:disksavvy:10.4.18:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 95%

0.21121

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-xq3h-j3m4-8fhm