CVE-2016-8582

EPSS 57.4%

Vexday Risk Score

50Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 57.4%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

28 Oct 2016Published on NVD

02 Nov 2016Public PoC

31 Jan 2017Metasploit module available

Weaponization speed

4 daysto first PoC

94 daysto Metasploit module

Weaponized quickly — attackers prioritized this vulnerability. Patch urgently.

Recommendation: Plan a near-term fix — a public PoC already exists.

A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/40684/unverified exploitdbwww.exploit-db.com/exploits/40684unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities https://www.exploit-db.com/exploits/40684/http://www.securityfocus.com/bid/93866