Quantum vmPRO Backdoor Unauthorized Access Vulnerability
BID:66274
Info
Quantum vmPRO Backdoor Unauthorized Access Vulnerability
| Bugtraq ID: | 66274 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 18 2014 12:00AM |
| Updated: | Mar 21 2014 01:14AM |
| Credit: | xistence |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Quantum vmPRO Backdoor Unauthorized Access Vulnerability
Quantum vmPRO is prone to an unauthorized-access vulnerability.
Attackers can exploit this issue to execute commands with root privileges on the affected device. This may aid in further attacks.
Quantum vmPRO 3.1.2 is vulnerable; other versions may also be affected.
Quantum vmPRO is prone to an unauthorized-access vulnerability.
Attackers can exploit this issue to execute commands with root privileges on the affected device. This may aid in further attacks.
Quantum vmPRO 3.1.2 is vulnerable; other versions may also be affected.
Exploit / POC
Quantum vmPRO Backdoor Unauthorized Access Vulnerability
Attackers can use readily available tools to exploit this issue.
The following exploit code is available :
Attackers can use readily available tools to exploit this issue.
The following exploit code is available :
Solution / Fix
Quantum vmPRO Backdoor Unauthorized Access Vulnerability
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.