ByteOS Network

NVD Vulnerability Details :

CVE-2018-6892

Modified

Source-cve@mitre.org

Published At-11 Feb, 2018 | 18:29

Updated At-06 Oct, 2020 | 01:15

An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

cloudme>>sync>>Versions up to 1.10.9(inclusive)

cpe:2.3:a:cloudme:sync:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://hyp3rlinx.altervista.org/advisories/CLOUDME-SYNC-UNAUTHENTICATED-REMOTE-BUFFER-OVERFLOW.txt	cve@mitre.org	Exploit Third Party Advisory
http://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.html	cve@mitre.org	N/A
http://packetstormsecurity.com/files/158716/CloudMe-1.11.2-SEH-Buffer-Overflow.html	cve@mitre.org	N/A
http://packetstormsecurity.com/files/159327/CloudMe-1.11.2-Buffer-Overflow.html	cve@mitre.org	N/A
https://blogs.securiteam.com/index.php/archives/3669	cve@mitre.org	Exploit Third Party Advisory
https://www.exploit-db.com/exploits/44027/	cve@mitre.org	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/44175/	cve@mitre.org	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/45197/	cve@mitre.org	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/46250/	cve@mitre.org	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/48840	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History