CVE-2024-6127

BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit this vulnerability over HTTP by acting as a normal agent, completing all cryptographic handshakes, and then triggering an upload of payload data containing a malicious path.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

10.26% chance of exploitation in the next 30 days, 95th percentile

Published

2024-06-27

Updated

2026-07-14

Proof-of-concept exploits (1)

• ACE-Responder/Empire-C2-RCE-PoC28★ · 2024-02-24

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/empire_skywalker.rb

References

• CVE Record
• NVD entry

Related

• CVE-2024-6116
• CVE-2024-6128
• CVE-2024-6115
• CVE-2024-6129
• CVE-2024-6114
• CVE-2024-6130