PT-2018-17576 · Disk Savvy · Disksavvy Enterprise

Daniel Teixeira · Published 2018-02-27 · Updated 2020-09-22 · CVE-2018-6481

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Disk Savvy Enterprise version 10.4.18

Description A buffer overflow issue in the control protocol allows remote attackers to execute arbitrary code by sending a crafted packet to the TCP port 9124.

Recommendations For Disk Savvy Enterprise version 10.4.18, consider restricting access to TCP port 9124 until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-6481

Affected Products

Disksavvy Enterprise

References · 6

• 🔥 https://exploit-db.com/exploits/44156 · Exploit
• 🔥 https://gist.github.com/DanielRTeixeira/5af55e62340e4df38e0c411eb0cc3dca · Exploit
• 🔥 http://packetstormsecurity.com/files/146541/Disk-Savvy-Enterprise-10.4.18-Buffer-Overflow.html · Exploit
• 🔥 https://youtube.com/watch?v=Ed7QXICSgeY · Exploit
• https://osv.dev/vulnerability/CVE-2018-6481 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6481 · Security Note