CVE-2018-7756

RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file located at an arbitrary external URL, or a "SETFIREWALL Off" command.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

60.74% chance of exploitation in the next 30 days, 99th percentile

Published

2018-03-14

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://hyp3rlinx.altervista.org/advisories/DEWESOFT-X3-REMOTE-INTERNAL-COMMAND-ACCESS.txt

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44275

References

• CVE Record
• NVD entry

Related

• CVE-2018-7750
• CVE-2018-7765
• CVE-2018-7747
• CVE-2018-7777
• CVE-2018-7746
• CVE-2018-7801