PT-2020-6506 · Unknown+1 · Eyesofnetwork+1

H4Kneto · Published 2020-02-05 · Updated 2025-11-10 · CVE-2020-8655

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.3

Description The issue is related to insufficient access control in the /etc/sudoers component of the EyesOfNetwork (EON) system and network monitoring tool. This can be exploited to escalate privileges, allowing an attacker to execute arbitrary commands as root using crafted NSE scripts for nmap.

Recommendations For EyesOfNetwork version 5.3, consider restricting access to the sudoers configuration and limiting the ability to run arbitrary commands as root until a patch is available. As a temporary workaround, restrict the use of NSE scripts to minimize the risk of exploitation.

Exploit

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2021-05675

CVE-2020-8655

Affected Products

Eyesofnetwork

Nmap

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetwork_autodiscovery_rce.rb · Exploit
• 🔥 https://github.com/EyesOfNetworkCommunity/eonconf/issues/8 · Exploit
• 🔥 https://exploit-db.com/exploits/48025 · Exploit
• 🔥 https://exploit-db.com/exploits/48169 · Exploit
• 🔥 http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html · Exploit
• 🔥 http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.html · Exploit
• https://bdu.fstec.ru/vul/2021-05675 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-8655 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8655 · Vendor Advisory
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8655 · Note
• https://t.me/cveNotify/142276 · Telegram Post