PT-2018-17807 · Cloudme · Cloudme

Boku · Published 2018-02-11 · Updated 2020-10-06 · CVE-2018-6892

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CloudMe versions prior to 1.11.0

Description An issue was discovered that allows an unauthenticated remote attacker to send a malicious payload to the CloudMe Sync client application, causing a buffer overflow condition. This results in the attacker controlling the program's execution flow, allowing arbitrary code execution. The attacker must be able to connect to the client application listening on port 8888.

Recommendations For versions prior to 1.11.0, update to version 1.11.0 or later to resolve the issue. As a temporary workaround, consider restricting access to port 8888 to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-6892

Affected Products

Cloudme

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/cloudme_sync.rb · Exploit
• 🔥 https://exploit-db.com/exploits/44175 · Exploit
• 🔥 https://exploit-db.com/exploits/44027 · Exploit
• 🔥 https://exploit-db.com/exploits/46250 · Exploit
• 🔥 https://exploit-db.com/exploits/48840 · Exploit
• 🔥 http://hyp3rlinx.altervista.org/advisories/CLOUDME-SYNC-UNAUTHENTICATED-REMOTE-BUFFER-OVERFLOW.txt · Exploit
• 🔥 https://exploit-db.com/exploits/45197 · Exploit
• 🔥 https://blogs.securiteam.com/index.php/archives/3669 · Exploit
• https://osv.dev/vulnerability/CVE-2018-6892 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6892 · Security Note
• http://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.html · Note
• http://packetstormsecurity.com/files/158716/CloudMe-1.11.2-SEH-Buffer-Overflow.html · Note
• http://packetstormsecurity.com/files/159327/CloudMe-1.11.2-Buffer-Overflow.html · Note