CVE-2016-1542
CVE-2016-1542
Vexday Risk Score
62High priority
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Popular PoC on GitHub (20 stars) — exploitation code widely available.
CVSS —EPSS 74.6%KEV nãoPoC públicaNuclei —Metasploit simPatch —
Lifecycle
16 Mar 2016Metasploit module available
13 Jun 2016Published on NVD
27 Apr 2017Public PoC
Weaponization speed
318 daysto first PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure.
Affected products
n/a · n/apublic PoCs found — 7
githubgithub.com/bao7uo/bmc_bladelogic★ 20githubgithub.com/patriknordlen/bladelogic_bmc-cve-2016-1542★ 0cve_referencewww.exploit-db.com/exploits/43939/unverifiedcve_referencepacketstormsecurity.com/files/136461/BMC-Server-Automation-BSA-RSCD-Agent-User-Enumeration.htmlunverifiedcve_referencewww.exploit-db.com/exploits/43902/unverifiedexploitdbwww.exploit-db.com/exploits/43902unverifiedexploitdbwww.exploit-db.com/exploits/43939unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/136461/BMC-Server-Automation-BSA-RSCD-Agent-User-Enumeration.htmlhttps://selfservice.bmc.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000dBpnCAE&type=Solutionhttps://www.exploit-db.com/exploits/43902/https://www.exploit-db.com/exploits/43939/https://www.insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/http://www.securityfocus.com/archive/1/537909/100/0/threaded