EDB-48169
functionalEyesOfNetwork - AutoDiscovery Target Command Execution (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2020-03-05catalog exploit_db
01
exploited CVEs (4)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-8656US | critical9.8 | Exploit | ||
An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentic… | ||||
| CVE-2020-8655US | high7.8OT critical | KEV | ||
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root… | ||||
| CVE-2020-8654US | high8.8 | Exploit | ||
An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module… | ||||
| CVE-2020-8657US | critical9.8OT critical | KEV | ||
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan