exploit/windows/http/plex_unpickle_dict_rce

functional

Plex Unpickle Dict Windows RCE

view exploit source metasploittype exploitpublished 2020-05-07catalog metasploit
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-5741UShigh7.2OT criticalKEV
Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan