exploit/windows/sage/x3_adxsrv_auth_bypass_cmd_exec

functional

Sage X3 Administration Service Authentication Bypass Command Execution

view exploit source metasploittype exploitpublished 2021-07-07catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-7388US	critical9.8	69.4% (99th)	Exploit	2021-07-22
Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can bypass credential vali…
CVE-2020-7387US	medium5.3	34.3% (98th)	Exploit	2021-07-22
Sage X3 Installation Pathname Disclosure. A specially crafted packet can elicit a response from the AdxDSrv.exe component that reveals the installation directory of the product. No…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.