CVE-2018-6892
CriticalPublic exploitAn unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition.
Published Feb 11, 2018 · Updated Nov 21, 2024
Key Facts
Patch immediately- CVE-2018-6892 is a critical-severity vulnerability (CVSS 9.8 v3) affecting Sync (Cloudme).
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 93% probability of exploitation in the next 30 days.
- Fixed versions are available, including Sync <=1.10.9, Sync 1.10.9.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v3
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
93%
Higher than 99.8% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2018-6892 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.
Affected Products
1 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| SyncCloudme | See advisory | 1.10.9 |
Patched Releases
Sync
<=1.10.9
Timeline
Publicly disclosed
Feb 11, 2018
Last updated
Nov 21, 2024
Weakness Type
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
- exploithttp://hyp3rlinx.altervista.org/advisories/CLOUDME-SYNC-UNAUTHENTICATED-REMOTE-BUFFER-OVERFLOW.txt
- exploithttps://blogs.securiteam.com/index.php/archives/3669
- exploitMSF cloudme_sync.rb
- exploitExploitDB-44027
- exploit44027
FAQ
Common Questions.
An issue was discovered in CloudMe before 1.11.0.
Affected: Sync (Cloudme). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Sync <=1.10.9, Sync 1.10.9.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2018-6892 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo