EyesOfNetwork 5.3 NSE Script privileges management

Summaryinfo

A vulnerability identified as critical has been detected in EyesOfNetwork 5.3. This affects an unknown function of the component NSE Script Handler. The manipulation leads to privileges management. This vulnerability is referenced as CVE-2020-8655. The attack can only be performed from a local environment. Furthermore, an exploit is available.

Detailsinfo

A vulnerability was found in EyesOfNetwork 5.3. It has been rated as critical. This issue affects some unknown functionality of the component NSE Script Handler. The manipulation with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.

The weakness was published 02/07/2020. The identification of this vulnerability is CVE-2020-8655 since 02/06/2020. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are unknown but a public exploit is available. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

The exploit is available at exploit-db.com. It is declared as attacked. The CISA Known Exploited Vulnerabilities Catalog lists this issue since 11/03/2021 with a due date of 05/03/2022:

Apply updates per vendor instructions.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (48169). Similar entries are available at VDB-149797, VDB-149796 and VDB-149794. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Name

• EyesOfNetwork

Version

• 5.3

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion