EDB-44297

PoC

Unitrends UEB 10.0 - Root Remote Code Execution

view exploit source exploit_dbtype remoteauthor Jared Aravepublished 2018-03-16catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-6329US	critical9.8	61.2% (99th)	Exploit	2018-03-14
It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege es…
CVE-2018-6328US	critical9.8	64.4% (99th)	Exploit	2018-03-14
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbi…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.