CVE-2016-7089

EPSS 1.2%◆ VulnCheck KEV

Vexday Risk Score

45Attention

SSVC decision (CISA)

Act

Exploitation + impact → act immediately

Exploit maturity

Proof of concept

Public proof of concept exists, but not yet automated.

CVSS —EPSS 1.2%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

19 Aug 2016Public PoC

24 Aug 2016Published on NVD

Recommendation: Patch as soon as possible — active exploitation confirmed.

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/40270/unverified cve_referencepacketstormsecurity.com/files/138393/ESCALATEPLOWMAN-WatchGuard-Privilege-Escalation.htmlunverified exploitdbwww.exploit-db.com/exploits/40270unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/138393/ESCALATEPLOWMAN-WatchGuard-Privilege-Escalation.html https://www.exploit-db.com/exploits/40270/https://www.secplicity.org/2016/08/16/nsa-equation-group-exploit-leak-mean/http://www.securityfocus.com/bid/92638