CVE-2017-6971
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 16%
from disclosure to weapon19 days
Published on NVDMar 22
1st PoC+19d
exploitation probability
16%top 3% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862.
Affected products
n/a · n/apublic PoCs found — 4
githubgithub.com/patrickfreed/nfsen-exploit★ 4githubgithub.com/KeyStrOke95/nfsen_1.3.7_CVE-2017-6971★ 0cve_referencewww.exploit-db.com/exploits/42306/unverifiedexploitdbwww.exploit-db.com/exploits/42306unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.