9.8crit
CVE-2018-6328in critical feed3 exploits
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could all…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
64.4%
percentile 99%
Public exploits
3
Metasploit · Exploit-DB
Summary
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes.
Exploit prediction (EPSS)
64.37% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
Exploits and detections
- Metasploit exploit/linux/http/ueb_api_rce Unitrends UEB http api remote code execution · metasploit exploit, excellent rank · 2017-08-08
- EDB-45559 Unitrends UEB - HTTP API Remote Code Execution (Metasploit) · remote · 2018-10-08
- EDB-44297 Unitrends UEB 10.0 - Root Remote Code Execution · remote · 2018-03-16
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-287 Improper Authentication
References
- exploit-db.com /exploits/45559/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- support.unitrends.com /UnitrendsBackup/s/article/000006002 · x_refsource_CONFIRM, x_transferred
- exploit-db.com /exploits/44297/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- support.unitrends.com /UnitrendsBackup/s/article/000001150 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-6328
- NVD: CVE-2018-6328
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.