by Kastro
Paper/Archive/CVE-2024-45256

CVE-2024-45256

malwared byob — An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite datab…

EPSS 6%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 93.0.930 × 2018.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in file_add in api/files/routes.py.

Affected

ProductAffectedFixed inSource
n/an/a–CNA
byob2.0–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/malwaredllc/byobrefblog.chebuya.com/posts/unauthenticated-remote-command-execution-on-byobrefgithub.com/chebuya/exploits/tree/main/BYOB-RCE