Command Injection Vulnerability in Symantec Web Gateway

CVE-2014-7285

What is CVE-2014-7285?

The management console on the Symantec Web Gateway appliance before version 5.2.2 is susceptible to a command injection vulnerability. This flaw allows remote authenticated users to execute arbitrary operating system commands by injecting malicious command strings through unspecified PHP scripts. Successful exploitation of this vulnerability could enable attackers to gain unauthorized control over the system, potentially leading to data breaches or further compromise of the network.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2014-7285
Created by Rapid7

References