CVE-2011-10017
Snort Report nmap.php/nbtscan.php RCE
Vexday Risk Score
63Prioridad alta
Decisión SSVC (CISA)
Attend
PoC disponible → seguir de cerca
CVSS 10EPSS 2.3%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado
Ciclo de vida
19 sep 2011Exploit Metasploit disponible
13 ago 2025Publicada en NVD
Recomendación: Planificar corrección próxima — ya existe PoC pública.
Snort Report versions < 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no authentication and can result in full compromise of the underlying system.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Productos afectados
Symmetrix Technologies · Snort ReportPoCs públicas encontradas — 2
cve_referenceraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/snortreport_exec.rbno verificadocve_referencewww.exploit-db.com/exploits/17947no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/snortreport_exec.rbhttps://web.archive.org/web/20111003093911/http://www.symmetrixtech.com/articles/news-016.htmlhttps://www.exploit-db.com/exploits/17947https://www.vulncheck.com/advisories/snort-report-rce