PT-2018-17576 · Disk Savvy · Disksavvy Enterprise

Daniel Teixeira · Publicado 2018-02-27 · Atualizado 2020-09-22 · CVE-2018-6481

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Disk Savvy Enterprise version 10.4.18

Description A buffer overflow issue in the control protocol allows remote attackers to execute arbitrary code by sending a crafted packet to the TCP port 9124.

Recommendations For Disk Savvy Enterprise version 10.4.18, consider restricting access to TCP port 9124 until a patch is available.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-6481

Produtos afetados

Disksavvy Enterprise

Referências · 6

• 🔥 https://exploit-db.com/exploits/44156 · Exploit
• 🔥 https://gist.github.com/DanielRTeixeira/5af55e62340e4df38e0c411eb0cc3dca · Exploit
• 🔥 http://packetstormsecurity.com/files/146541/Disk-Savvy-Enterprise-10.4.18-Buffer-Overflow.html · Exploit
• 🔥 https://youtube.com/watch?v=Ed7QXICSgeY · Exploit
• https://osv.dev/vulnerability/CVE-2018-6481 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6481 · Nota de Segurança