CVE-2024-48904 PoC — Trend Micro Cloud Edge 安全漏洞

Source

https://github.com/famixcm/CVE-2024-48904

Associated Vulnerability

Title:Trend Micro Cloud Edge 安全漏洞 (CVE-2024-48904)
Description:Trend Micro Cloud Edge是美国趋势科技（Trend Micro）公司的一款云安全解决方案，旨在保护企业的云基础设施、应用和数据。 Trend Micro Cloud Edge 5.6SP2版本和7.0版本存在安全漏洞，该漏洞源于存在命令注入漏洞，可能允许远程攻击者在受影响的设备上执行任意代码。

Readme

# CVE-2024-48904: Trend Micro Cloud Edge REST API

## Details
An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances (authentication is not required in order to exploit this vulnerability).

## Description
- **CVE ID**:	CVE-2024-48904
- **CVSS SCORE**: 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- **AFFECTED VENDORS**: Trend Micro
- **AFFECTED PRODUCTS**:	Cloud Edge

## Vulnerability Explanation
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Cloud Edge. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the REST API, which listens on TCP port 8443 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.

## Requirement
Python 3.9

## Exploit
[Download Here](https://ur0.jp/k7prU) - only 5 copies


including all necessary howtos inside tutorial.txt

File Snapshot


 [4.0K]  /data/pocs/bf0e25b834ebcf164a8cbd12906daf19fc355f10
└── [1.1K]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!