CVE-2015-1497

Related Files

HP Client Automation 7.9 Command Injection

Posted Oct 10, 2016

Authored by slidingwindow0xff

HP Client Automation remote command injection exploit that adds backdoor accounts and provides a reverse shell. Author tested on version 7.9 but believes it should also work on 8.1, 9.0, and 9.1.

tags | exploit, remote, shell

advisories | CVE-2015-1497

SHA-256 | 21071151f479044290767d7497c10787d8aae743a7b1d0070b60601cbca11962

Download | Favorite | View

HP Client Automation Command Injection

Posted Feb 24, 2015

Authored by juan vazquez, Ben Turner | Site metasploit.com

This Metasploit module exploits a command injection vulnerability on HP Client Automation, distributed actually as Persistent Systems Client Automation. The vulnerability exists in the Notify Daemon (radexecd.exe), which doesn't authenticate execution requests by default neither. This Metasploit module has been tested successfully on HP Client Automation 9.00 over Windows 2003 SP2 and CentOS 5.

tags | exploit

systems | linux, windows, centos

advisories | CVE-2015-1497

SHA-256 | d843ef58af2b82e590925f0a42de6759952ad10722aca5dd7bb3fdf81fef83ab

Download | Favorite | View