CVE-2018-6329

EPSS 62.5%

Vexday Risk Score

50Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 62.5%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

14 Mar 2018Metasploit module available

14 Mar 2018Published on NVD

16 Mar 2018Public PoC

Weaponization speed

1 daysto first PoC

Weaponized quickly — attackers prioritized this vulnerability. Patch urgently.

Recommendation: Plan a near-term fix — a public PoC already exists.

It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/44297/unverified cve_referencewww.exploit-db.com/exploits/45913/unverified exploitdbwww.exploit-db.com/exploits/45913unverified exploitdbwww.exploit-db.com/exploits/44297unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://support.unitrends.com/UnitrendsBackup/s/article/000001150 https://support.unitrends.com/UnitrendsBackup/s/article/000006003 https://www.exploit-db.com/exploits/44297/https://www.exploit-db.com/exploits/45913/