noways-io/securenvoy-cve-2024-37393

PoC

Vulnerability check script for CVE-2024-37393 (SecurEnvoy MFA 9.4.513)

view exploit source poc_in_githubauthor noways-iopublished 2024-06-10catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-37393US	high7.5OT elevated	3.30% (88th)	Exploit	2024-06-10
Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltra…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.