CVE-2018-9160
CVE-2018-9160
Vexday Risk Score
60Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 76.5%KEV nãoPoC públicaNuclei —Metasploit simPatch —
Lifecycle
08 Mar 2018Metasploit module available
31 Mar 2018Published on NVD
26 Apr 2018Public PoC
Weaponization speed
25 daysto first PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
Affected products
n/a · n/apublic PoCs found — 3
githubgithub.com/mechanico/sickrageWTF★ 0cve_referencewww.exploit-db.com/exploits/44545/unverifiedexploitdbwww.exploit-db.com/exploits/44545unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.