exploit/linux/http/ueb_api_rce

weaponized

Unitrends UEB http api remote code execution

view exploit source metasploittype exploitpublished 2017-08-08catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-6328US	critical9.8	64.4% (99th)	Exploit	2018-03-14
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbi…
CVE-2017-12478US	critical9.8	78.3% (100th)	Exploit	2017-08-07
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker c…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.