EDB-32885

PoC

Unitrends Enterprise Backup 7.3.0 - Root Remote Code Execution (Metasploit)

view exploit source exploit_dbtype remoteauthor Brandon Perrypublished 2014-04-15catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-3139US	high7.5	3.17% (88th)	Exploit	2014-05-02
recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by setting the auth parameter to a certain string.
CVE-2014-3008US	high10.0	6.68% (94th)	Exploit	2014-04-28
Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.