3
[webapps] Nokia BMC Log Scanner - Remote Code Execution
source link: https://www.exploit-db.com/exploits/51896
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Nokia BMC Log Scanner - Remote Code Execution
EDB-ID:
51896
EDB Verified:
# Exploit Title: Nokia BMC Log Scanner Remote Code Execution
# Google Dork: N/A
# Date: November 29, 2023
# Exploit Author: Carlos Andres Gonzalez, Matthew Gregory
# Vendor Homepage: https://www.nokia.com/
# Software Link: N/A
# Version: 13
# Tested on: Linux
# CVE : CVE-2022-45899
Description
The BMC Log Scanner web application, available on several hosts, is vulnerable to command injection
attacks, allowing for unauthenticated remote code execution. This vulnerability is especially significant
because this service runs as root.
Steps to Reproduce:
In the Search Pattern field, type:
;";command
Replacing the word "command" above with any Linux command.
Root access can be confirmed with the id command or any other command that would require
root access, such as displaying the contents of the /etc/shadow file."
This issue was fixed in version 13.1.
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK