Lucene search

[email protected]CVE-2015-1497

HistoryFeb 16, 2015 - 3:59 p.m.

CVE-2015-1497

2015-02-1615:59:10

CWE-94

[email protected]

web.nvd.nist.gov

cve-2015-1497

radexecd.exe

persistent systems

radia client automation

rca

remote attack

arbitrary commands

tcp port 3465

vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.939 High

EPSS

Percentile

99.2%

JSON

radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465.

Affected configurations

NVD

Node

persistent_systemsradia_client_automationMatch7.9

persistent_systemsradia_client_automationMatch8.1

persistent_systemsradia_client_automationMatch9.0

persistent_systemsradia_client_automationMatch9.1

CPENameOperatorVersion
persistent_systems:radia_client_automationpersistent systems radia client automationeq7.9
persistent_systems:radia_client_automationpersistent systems radia client automationeq8.1
persistent_systems:radia_client_automationpersistent systems radia client automationeq9.0
persistent_systems:radia_client_automationpersistent systems radia client automationeq9.1

CPE	Name	Operator	Version
persistent_systems:radia_client_automation	persistent systems radia client automation	eq	7.9
persistent_systems:radia_client_automation	persistent systems radia client automation	eq	8.1
persistent_systems:radia_client_automation	persistent systems radia client automation	eq	9.0
persistent_systems:radia_client_automation	persistent systems radia client automation	eq	9.1

References

osvdb.org/show/osvdb/118382

packetstormsecurity.com/files/130459/HP-Client-Automation-Command-Injection.html

www.exploit-db.com/exploits/36169

www.exploit-db.com/exploits/36206

www.securityfocus.com/bid/72612

www.zerodayinitiative.com/advisories/ZDI-15-038/

support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features

www.exploit-db.com/exploits/40491/