PT-2015-1008 · Ca Technologies · Radia Client Automation

Slidingwindow · Published 2015-02-10 · Updated 2017-09-03 · CVE-2015-1497

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Radia Client Automation versions 7.9 through 9.1

Description The issue allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465. This is a command injection remote code execution issue in the radexecd.exe service.

Recommendations For versions 7.9 through 9.1, consider restricting access to TCP port 3465 as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Eval Injection

Code Injection

Weakness Enumeration

CWE-95

CWE-94

Related Identifiers

BDU:2015-09812

CVE-2015-1497

ZDI-15-038

Affected Products

Radia Client Automation

References · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/persistent_hpca_radexec_exec.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/130459/HP-Client-Automation-Command-Injection.html · Exploit
• 🔥 http://exploit-db.com/exploits/36206 · Exploit
• 🔥 https://exploit-db.com/exploits/36206 · Exploit
• 🔥 http://exploit-db.com/exploits/36169 · Exploit
• 🔥 https://exploit-db.com/exploits/40491 · Exploit
• 🔥 https://exploit-db.com/exploits/36169 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-1497 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1497 · Security Note
• https://bdu.fstec.ru/vul/2015-09812 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-038 · Security Note
• https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features · Note
• http://securityfocus.com/bid/72612 · Note
• http://osvdb.org/show/osvdb/118382 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-038 · Note