Command Injection Vulnerability in Artica Web Proxy by Artica Networks
CVE-2020-17505

8.8HIGH

Key Information:

Vendor

Articatech

Status
Web Proxy
Vendor
CVE Published:
12 August 2020

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 82%

What is CVE-2020-17505?

Artica Web Proxy version 4.30.000000 is susceptible to a command injection vulnerability. An authenticated remote attacker can exploit this flaw through the service-cmds parameter in the cyrus.php file. Executed commands gain root privileges by using the service_cmds_perform function, allowing attackers to control the system and execute arbitrary commands. This poses a significant risk to system integrity and confidentiality.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2020-17505
Created by Rapid7

References

https://blog.max0x4141.com/post/artica_proxy/
x_refsource_MISC
http://packetstormsecurity.com/files/159267/Artica-Proxy-...
x_refsource_MISC

EPSS Score

82% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.