CVE-2016-6603

CVE-2016-6603

EPSS 87.0%

Vexday Risk Score

45Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Proof of concept

Public proof of concept exists, but not yet automated.

CVSS —EPSS 87.0%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

10 Aug 2016Public PoC

23 Jan 2017Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.

Affected products

public PoCs found — 3

cve_referencepacketstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.htmlunverified cve_referencewww.exploit-db.com/exploits/40229/unverified exploitdbwww.exploit-db.com/exploits/40229unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html https://blogs.securiteam.com/index.php/archives/2712 http://seclists.org/fulldisclosure/2016/Aug/54 https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt https://www.exploit-db.com/exploits/40229/http://www.securityfocus.com/archive/1/539159/100/0/threaded http://www.securityfocus.com/bid/92402