Exploit for Code Injection in Cisco Adaptive_Security_Device_Manager

🗓️ 10 Feb 2022 21:52:24Reported by jbaines-r7Type

Exploit for Code Injection in Cisco ASDM, CVE-2021-1585, allows remote attackers to execute commands and obtain a reverse shell by injecting malicious payloads into the Adaptive Security Device Manager (ASDM). "staystaystay" exploit works even on the patched version, requiring the victim to click "Yes". It supports 'jjs.exe' and 'Longtime Sunshine' payloads, facilitating the execution of arbitrary commands

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	The vulnerability of the ASDM Launcher, a tool for managing Cisco Adaptive Security Device Manager (ASDM) network interfaces, allows a hacker to execute arbitrary code.	20 Jul 202100:00	–	bdu_fstec
Circl	CVE-2021-1585	8 Aug 202108:21	–	circl
Cisco	Cisco Adaptive Security Device Manager Remote Code Execution Vulnerability	7 Jul 202116:00	–	cisco
CNNVD	Cisco Adaptive Security Device Manager 代码注入漏洞	7 Jul 202100:00	–	cnnvd
CNVD	Cisco Adaptive Security Device Manager Remote Code Execution Vulnerability	8 Jul 202100:00	–	cnvd
CVE	CVE-2021-1585	8 Jul 202118:35	–	cve
Cvelist	CVE-2021-1585 Cisco Adaptive Security Device Manager Remote Code Execution Vulnerability	8 Jul 202118:35	–	cvelist
NCSC	Vulnerability fixed in Cisco Adaptive Security Device Manager	8 Jul 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Cisco Adaptive Security Appliance	11 Aug 202200:00	–	ncsc
NVD	CVE-2021-1585	8 Jul 202119:15	–	nvd