CVEs-PoC/2017/CVE-2017-8894.md

CVE-2017-8894

Description

AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can hijack an update via man-in-the-middle in order to execute code in the machine.

POC

Reference

• https://www.tarlogic.com/advisories/Tarlogic-2017-001.txt
• https://www.tarlogic.com/advisories/Tarlogic-2017-001.txt

Github

No PoCs found on GitHub currently.