CVE-2018-1235 PoC — Dell EMC RecoverPoint和RecoverPoint for Virtual Machines 命令注入漏洞

Source

https://github.com/AbsoZed/CVE-2018-1235

Associated Vulnerability

Title: Dell EMC RecoverPoint和RecoverPoint for Virtual Machines 命令注入漏洞 (CVE-2018-1235)
Description:Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege.

Description

A python script that tests for an exploitable instance of CVE-2018-1235.

Readme

# CVE-2018-1235

A python script that tests for an exploitable instance of CVE-2018-1235.

NIST: https://nvd.nist.gov/vuln/detail/CVE-2018-1235

Usage:
./CVE-2018-1235.py -t [Target Host] -r [Your IP]

This code may be altered to actively exploit the vulnerability. Support for network scopes may be added later.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →