Unscored severity · published Feb 16, 2015
CVE-2015-1497
radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port…
–
CVSS
74.5%
EPSS
No
On KEV
Description
radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465.
Exploitation
Is it being used?
Exploit prediction (EPSS)74.5% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RC
Radia Client Automation · Persistent Systems
7.9; 8.1; 9.0; 9.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1497
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1497
osvdb.org
http://osvdb.org/show/osvdb/118382
Exploit
http://packetstormsecurity.com/files/130459/HP-Client-Automation-Command-Injection.html
Exploit
http://www.exploit-db.com/exploits/36169
Exploit
http://www.exploit-db.com/exploits/36206
www.securityfocus.com
http://www.securityfocus.com/bid/72612
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-15-038/
More from Radia Client Automation
–
CVE-2015-1498
Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to (1) enumerate user accounts via a getUsers…