Main
Vulnerability Database
Exploits
ID:6433 - Exploit for Improper access control in DiskBoss - CVE-2017-15665
ID:6433 - Exploit for Improper access control in DiskBoss - CVE-2017-15665
Published: June 17, 2021
Vulnerability identifier: #VU12871
Vulnerability risk: Low
CVE-ID: CVE-2017-15665
CWE-ID: CWE-284
Exploitation vector: Remote access
Vulnerable software:
DiskBoss
DiskBoss
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists the Control Protocol due to improper access control. A remote attacker can submit a specially crafted SERVER_GET_INFO packet to control port 8094 and cause the service to crash.
The weakness exists the Control Protocol due to improper access control. A remote attacker can submit a specially crafted SERVER_GET_INFO packet to control port 8094 and cause the service to crash.
Remediation
Install update from vendor's website.