CVE-2018-6892 An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causi...
CriticalCVSS 9.8
EPSS 93.4%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudme sync | <= 1.10.9 | No fix listed |
References
- hyp3rlinx.altervista.org exploit third-party-advisory
- packetstormsecurity.com
- packetstormsecurity.com
- packetstormsecurity.com
- blogs.securiteam.com exploit third-party-advisory
- 44027 exploit third-party-advisory vdb-entry
- 44175 exploit third-party-advisory vdb-entry
- 45197 exploit third-party-advisory vdb-entry
- 46250 exploit third-party-advisory vdb-entry
- 48840 exploit