Vulnerability Details : CVE-2015-1497
Public exploit exists!
radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465.
Products affected by CVE-2015-1497
- cpe:2.3:a:persistent_systems:radia_client_automation:7.9:*:*:*:*:*:*:*
- cpe:2.3:a:persistent_systems:radia_client_automation:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:persistent_systems:radia_client_automation:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:persistent_systems:radia_client_automation:9.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-1497
89.33%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2015-1497
-
HP Client Automation Command Injection
Disclosure Date: 2014-01-02First seen: 2020-04-26exploit/multi/misc/persistent_hpca_radexec_execThis module exploits a command injection vulnerability on HP Client Automation, distributed actually as Persistent Systems Client Automation. The vulnerability exists in the Notify Daemon (radexecd.exe), which doesn't authenticate execution requests by default. This
CVSS scores for CVE-2015-1497
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
CWE ids for CVE-2015-1497
-
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-1497
-
http://www.exploit-db.com/exploits/36169
HP Client - Automation Command Injection (Metasploit)Exploit
-
http://osvdb.org/show/osvdb/118382
-
http://www.zerodayinitiative.com/advisories/ZDI-15-038/
ZDI-15-038 | Zero Day Initiative
-
https://www.exploit-db.com/exploits/40491/
HP Client 9.1/9.0/8.1/7.9 - Command Injection
-
https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features
Accelerite releases solutions and best practices to enhance the security for RBAC and Remote Notify features
-
http://www.securityfocus.com/bid/72612
Persistent Systems Radia Client Automation CVE-2015-1497 Remote Code Execution Vulnerability
-
http://www.exploit-db.com/exploits/36206
Persistent Systems Client Automation - Command Injection Remote Code Execution (Metasploit)Exploit
-
http://packetstormsecurity.com/files/130459/HP-Client-Automation-Command-Injection.html
HP Client Automation Command Injection ≈ Packet StormExploit
Jump to