PT-2021-12648 · Unknown · Metasploit Framework

Jeff Dileo · Published 2021-04-23 · Updated 2022-05-24 · CVE-2020-7385

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Metasploit Framework (affected versions not specified)

Description: The issue arises when the drb remote codeexec exploit is launched, exposing Metasploit to a deserialization issue due to its reliance on vulnerable Distributed Ruby class functions. This can lead to a system compromise on the Metasploit workstation, especially since Metasploit Framework typically runs with elevated privileges. An attacker would need to lure the Metasploit user into running the affected module against a malicious endpoint. The vulnerability is only present when the drb remote codeexec module is running, which in most cases cannot happen automatically.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2020-7385

GHSA-XGWW-H98F-24QF

Affected Products

Metasploit Framework

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/pull/14335 · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/pull/14300 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-7385 · Security Note
• https://help.rapid7.com/metasploit/release-notes/archive/2020/10 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7385 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xgww-h98f-24qf · Vendor Advisory
• https://github.com/rapid7/metasploit-framework · Note