by Kastro
Paper/Archive/CVE-2024-6127

CVE-2024-6127

BC Security Empire — BC Security Empire Path Traversal RCE

EPSS 10%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 95.7.957 × 2019.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit this vulnerability over HTTP by acting as a normal agent, completing all cryptographic handshakes, and then triggering an upload of payload data containing a malicious path.

Affected

ProductAffectedFixed inSource
Empire< 5.9.35.9.3CNA
empire< 5.9.35.9.3CISA-ADP

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeupaceresponder.com/blog/exploiting-empire-c2-frameworkexploitgithub.com/ACE-Responder/Empire-C2-RCE-PoCadvisorygithub.com/BC-SECURITY/Empire/blob/8283bbc77250232eb493bf1f9104fdd0d468962a/CHANGELOG.md?plain=1#L102writeupvulncheck.com/advisories/empire-unauth-rce