CVE-2014-4872

EPSS 80.1%

Vexday Risk Score

60Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 80.1%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

07 Oct 2014Metasploit module available

09 Oct 2014Public PoC

10 Oct 2014Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via a .NET Remoting request to (1) FileStorageService or (2) ConfigurationService.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.com/files/128594/BMC-Track-it-Remote-Code-Execution-SQL-Injection.htmlunverified exploitdbwww.exploit-db.com/exploits/35032unverified exploitdbwww.exploit-db.com/exploits/34924unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/128594/BMC-Track-it-Remote-Code-Execution-SQL-Injection.html https://raw.githubusercontent.com/pedrib/PoC/master/generic/bmc-track-it-11.3.txt http://www.kb.cert.org/vuls/id/121036