CVE-2018-1235 PoC — Dell EMC RecoverPoint和RecoverPoint for Virtual Machines 命令注入漏洞

Source

https://github.com/AbsoZed/CVE-2018-1235

Associated Vulnerability

Title:Dell EMC RecoverPoint和RecoverPoint for Virtual Machines 命令注入漏洞 (CVE-2018-1235)
Description:Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege.

Description

A python script that tests for an exploitable instance of CVE-2018-1235.

Readme

# CVE-2018-1235

A python script that tests for an exploitable instance of CVE-2018-1235.

NIST: https://nvd.nist.gov/vuln/detail/CVE-2018-1235

Usage:
./CVE-2018-1235.py -t [Target Host] -r [Your IP]

This code may be altered to actively exploit the vulnerability. Support for network scopes may be added later.

File Snapshot


 [4.0K]  /data/pocs/aef3864146d74e5eee679de664e9ecdb6fbf2728
├── [1.9K]  CVE-2018-1235.py
└── [ 313]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!