auxiliary/gather/nuuo_cms_bruteforce

functional

Nuuo Central Management Server User Session Token Bruteforce

view exploit source metasploittype auxiliarypublished 2018-10-11catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-17888US	critical9.8OT high	29.6% (98th)	Exploit	2018-10-12
NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrary…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.