EDB-43031

functional

Unitrends UEB 9 - bpserverd Authentication Bypass Remote Command Execution (Metasploit)

view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2017-10-23catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-12477UScritical9.8Exploit
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypasse…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan