CVE-2015-1497

2015-02-1615:59:10

CWE-94

[email protected]

web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.939 High

EPSS

Percentile

99.2%

JSON

radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465.

Affected configurations

NVD

Node

persistent_systemsradia_client_automationMatch7.9

persistent_systemsradia_client_automationMatch8.1

persistent_systemsradia_client_automationMatch9.0

persistent_systemsradia_client_automationMatch9.1

References

osvdb.org/show/osvdb/118382

packetstormsecurity.com/files/130459/HP-Client-Automation-Command-Injection.html

www.exploit-db.com/exploits/36169

www.exploit-db.com/exploits/36206

www.securityfocus.com/bid/72612

www.zerodayinitiative.com/advisories/ZDI-15-038/

support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features

www.exploit-db.com/exploits/40491/