CVE-2017-11610
CVE-2017-11610
Vexday Risk Score
82Fix now
SSVC decision (CISA)
Act
Exploitation + impact → act immediately
Exploit maturity
Functional exploit
Popular PoC on GitHub (4 stars) — exploitation code widely available.
CVSS —EPSS 87.5%KEV nãoPoC públicaNuclei simMetasploit simPatch referenciado
Lifecycle
19 Jul 2017Metasploit module available
23 Aug 2017Published on NVD
25 Sep 2017Public PoC
Weaponization speed
32 daysto first PoC
Recommendation: Patch as soon as possible — active exploitation confirmed.
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.
Affected products
n/a · n/apublic PoCs found — 8
githubgithub.com/yaunsky/CVE-2017-11610★ 4githubgithub.com/Dungsocool/CVE-2017-11610★ 0githubgithub.com/ivanitlearning/CVE-2017-11610★ 0vulncheckvulncheck.com/xdb/bf74e8240eb3unverifiedcve_referencewww.exploit-db.com/exploits/42779/unverifiedvulncheckvulncheck.com/xdb/aff38bcfb069unverifiedexploitdbwww.exploit-db.com/exploits/42779unverifiedvulncheckvulncheck.com/xdb/60c1a10938b9unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://access.redhat.com/errata/RHSA-2017:3005https://github.com/Supervisor/supervisor/blob/3.0.1/CHANGES.txthttps://github.com/Supervisor/supervisor/blob/3.1.4/CHANGES.txthttps://github.com/Supervisor/supervisor/blob/3.2.4/CHANGES.txthttps://github.com/Supervisor/supervisor/blob/3.3.3/CHANGES.txthttps://github.com/Supervisor/supervisor/issues/964https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GMSCGMM477N64Z3BM34RWYBGSLK466B/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DTPDZV4ZRICDYAYZVUHSYZAYDLRMG2IM/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXGWOJNSWWK2TTWQJZJUP66FLFIWDMBQ/https://security.gentoo.org/glsa/201709-06https://www.exploit-db.com/exploits/42779/http://www.debian.org/security/2017/dsa-3942