exploit/linux/http/eyesofnetwork_autodiscovery_rce
weaponizedEyesOfNetwork 5.1-5.3 AutoDiscovery Target Command Execution
01
exploited CVEs (5)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-9465US | critical9.8 | Exploit | ||
An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform… | ||||
| CVE-2020-8656US | critical9.8 | Exploit | ||
An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentic… | ||||
| CVE-2020-8655US | high7.8OT critical | KEV | ||
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root… | ||||
| CVE-2020-8654US | high8.8 | Exploit | ||
An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module… | ||||
| CVE-2020-8657US | critical9.8OT critical | KEV | ||
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan