PT-2018-17807 · Cloudme · Cloudme

Boku · Publicado 2018-02-11 · Atualizado 2020-10-06 · CVE-2018-6892

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CloudMe versions prior to 1.11.0

Description An issue was discovered that allows an unauthenticated remote attacker to send a malicious payload to the CloudMe Sync client application, causing a buffer overflow condition. This results in the attacker controlling the program's execution flow, allowing arbitrary code execution. The attacker must be able to connect to the client application listening on port 8888.

Recommendations For versions prior to 1.11.0, update to version 1.11.0 or later to resolve the issue. As a temporary workaround, consider restricting access to port 8888 to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-6892

Produtos afetados

Cloudme

Referências · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/cloudme_sync.rb · Exploit
• 🔥 https://exploit-db.com/exploits/44175 · Exploit
• 🔥 https://exploit-db.com/exploits/44027 · Exploit
• 🔥 https://exploit-db.com/exploits/46250 · Exploit
• 🔥 https://exploit-db.com/exploits/48840 · Exploit
• 🔥 http://hyp3rlinx.altervista.org/advisories/CLOUDME-SYNC-UNAUTHENTICATED-REMOTE-BUFFER-OVERFLOW.txt · Exploit
• 🔥 https://exploit-db.com/exploits/45197 · Exploit
• 🔥 https://blogs.securiteam.com/index.php/archives/3669 · Exploit
• http://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.html · Nota
• https://osv.dev/vulnerability/CVE-2018-6892 · Aviso do Fabricante
• http://packetstormsecurity.com/files/158716/CloudMe-1.11.2-SEH-Buffer-Overflow.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6892 · Nota de Segurança
• http://packetstormsecurity.com/files/159327/CloudMe-1.11.2-Buffer-Overflow.html · Nota