CVE-2018-6328

EPSS 65.5%

Vexday Risk Score

50Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 65.5%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

08 Aug 2017Metasploit module available

14 Mar 2018Published on NVD

16 Mar 2018Public PoC

Weaponization speed

1 daysto first PoC

Weaponized quickly — attackers prioritized this vulnerability. Patch urgently.

Recommendation: Plan a near-term fix — a public PoC already exists.

It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/44297/unverified cve_referencewww.exploit-db.com/exploits/45559/unverified exploitdbwww.exploit-db.com/exploits/45559unverified exploitdbwww.exploit-db.com/exploits/44297unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://support.unitrends.com/UnitrendsBackup/s/article/000001150 https://support.unitrends.com/UnitrendsBackup/s/article/000006002 https://www.exploit-db.com/exploits/44297/https://www.exploit-db.com/exploits/45559/