CVE-2017-17407
Netgain Systems Enterprise Manager script_test Command Injection Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager v7.2.699 build 1001. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the content parameter provided to the script_test.jsp endpoint. A crafted content request parameter can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code under the context of the web service. Was ZDI-CAN-5080.
Esta vulnerabilidad permite que atacantes remotos ejecuten código arbitrario en instalaciones vulnerables de NetGain Systems Enterprise Manager v7.2.699 build 1001. No se requiere autenticación para explotar esta vulnerabilidad. Este problema en concreto existe en la manipulación del parámetro content proporcionado al extremo script_test.jsp. Un parámetro de petición de contenido manipulado puede desencadenar la ejecución de una llamada del sistema compuesta de una cadena proporcionada por el usuario. Un atacante podría aprovecharse de esta vulnerabilidad para ejecutar código en el contexto del servicio web. Anteriormente era ZDI-CAN-5080.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of the content parameter provided to the script_test.jsp endpoint. A crafted content request parameter can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code under the context of the web service.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-12-05 CVE Reserved
- 2017-12-13 CVE Published
- 2024-08-05 CVE Updated
- 2024-10-05 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CWE-134: Use of Externally-Controlled Format String
CAPEC
References (1)
URL | Tag | Source |
---|---|---|
https://zerodayinitiative.com/advisories/ZDI-17-954 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Netgain-systems Search vendor "Netgain-systems" | Enterprise Manager Search vendor "Netgain-systems" for product "Enterprise Manager" | 7.2.699 Search vendor "Netgain-systems" for product "Enterprise Manager" and version "7.2.699" | - |
Affected
|