CVE-2018-25272 - Vulnerability Analysis

Overview

ELBA5 5.8.0 contains a remote code execution caused by default connector credentials and xp_cmdshell stored procedure misuse, letting attackers obtain database credentials and execute commands with SYSTEM permissions, exploit requires default credentials.

Severity & Score

Impact

Attackers can execute arbitrary commands with SYSTEM permissions and obtain database credentials, leading to full system compromise.

Mitigation

Update to the latest version that fixes default credential and xp_cmdshell vulnerabilities.

References

• https://www.exploit-db.com/exploits/45905
• https://www.vulncheck.com/advisories/elba5-remote-code-execution-via-database-access
• https://www.elba.at

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner