Critical severity · published May 20, 2020
CVE-2020-12835
An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5
9.8
CVSS
13.3%
EPSS
No
On KEV
Description
An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into the communication, resulting in remote code execution in the context of a client-side Network Licensing Protocol component.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)13.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Readyapi · Smartbear
3.2.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12835
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12835
Exploit
http://packetstormsecurity.com/files/157772/Protection-Licensing-Toolkit-ReadyAPI-3.2.5-Code-Execution-Deserialization.html
Exploit
http://seclists.org/fulldisclosure/2020/May/38
Exploit
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-039.txt
Third Party Advisory
https://www.syss.de/pentest-blog/
More from Readyapi
8.8
CVE-2018-20580
The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file
7.8
CVE-2019-12180
An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5