Lucene search
PRIOn knowledge basePRION:CVE-2018-7756HistoryMar 15, 2018 - 1:29 a.m.
Command injection
2018-03-1501:29:00
PRIOn knowledge base
www.prio-n.com
3
RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file located at an arbitrary external URL, or a “SETFIREWALL Off” command.
Related
nvd
nvd
CVE-2018-7756
2018-03-15 01:29:03
exploitpack
exploitpack
DEWESoft X3 SP1 (64-bit) - Remote Command Execution
2018-03-12 00:00:00
cvelist
cvelist
CVE-2018-7756
2018-03-14 20:00:00
packetstorm
packetstorm
DEWESoft X3 Remote Internal Command Access
2018-03-09 00:00:00
cve
cve
CVE-2018-7756
2018-03-15 01:29:03
zdt
zdt
exploitdb
exploitdb
DEWESoft X3 SP1 (x64) - Remote Command Execution
2018-03-12 00:00:00