CVE-2018-25159 - Vulnerability Analysis

Overview

Epross AVCON6 systems management platform contains an expression language injection caused by OGNL injection in the redirect parameter of login.action, letting unauthenticated attackers execute arbitrary commands with root privileges.

Severity & Score

Impact

Unauthenticated attackers can execute arbitrary system commands with root privileges, leading to full system compromise.

Mitigation

Update to the latest version with the vulnerability fixed.

References

• https://www.vulncheck.com/advisories/epross-avcon-ognl-remote-code-execution-via-loginaction
• https://www.vulncheck.com/advisories/epross-avcon6-ognl-remote-code-execution-via-login-action
• https://www.exploit-db.com/exploits/47379

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner