CVE-2019-7300

moderate-risk
Published 2019-02-01

Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin and ldap_password fields, using these credentials at logon.php, and then entering the commands in the admin.index.php command-line field.

Do I need to act?

~
2.7% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.2/10 High
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Articatech

References (4)

Exploit https://code610.blogspot.com/2019/01/rce-in-artica.html
Exploit https://github.com/c610/tmp/blob/master/aRtiCE.py
Exploit https://code610.blogspot.com/2019/01/rce-in-artica.html
Exploit https://github.com/c610/tmp/blob/master/aRtiCE.py
37
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 6/34 · Minimal
Exposure 5/34 · Minimal