CVE-2014-4872

Numara / BMC Track-It! FileStorageService - Arbitrary File Upload

Severity Score

7.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via a .NET Remoting request to (1) FileStorageService or (2) ConfigurationService.

BMC Track-It! 11.3.0.355 no requiere la autenticación en el puerto TCP 9010, lo que permite a atacantes remotos subir ficheros arbitrarios, ejecutar código arbitrario u obtener información sensible sobre credenciales y configuraciones a través de una solicitud .NET Remoting en (1) FileStorageService o (2) ConfigurationService.

BMC Track-it! suffers from code execution, arbitrary file download, and remote SQL injection vulnerabilities.

*Credits: N/A

CVSS Scores

NISTv2 7.5

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-07-10 CVE Reserved
2014-10-08 CVE Published
2014-10-09 First Exploit
2024-08-06 CVE Updated
2024-10-08 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-306: Missing Authentication for Critical Function

CAPEC

References (5)

URL	Tag	Source
http://packetstormsecurity.com/files/128594/BMC-Track-it-Remote-Code-Execution-SQL-Injection.html	Third Party Advisory
http://www.kb.cert.org/vuls/id/121036	Third Party Advisory
https://raw.githubusercontent.com/pedrib/PoC/master/generic/bmc-track-it-11.3.txt	Broken Link

URL	Date	SRC
https://www.exploit-db.com/exploits/35032	2014-10-21
https://www.exploit-db.com/exploits/34924	2014-10-09

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Bmc Search vendor "Bmc"		Track-it\! Search vendor "Bmc" for product "Track-it\!"				11.3.0.355 Search vendor "Bmc" for product "Track-it\!" and version "11.3.0.355"		-		Affected