vendor:
ELBA5
by:
Florian Bogner
9.8
CVSS
HIGH
Remote Code Execution
78
CWE
Product Name: ELBA5
Affected Version From: 5.7.1
Affected Version To: 5.8.0
Patch Exists: YES
Related CWE: N/A
CPE: a:elba:elba5
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows
2018
ELBA5 5.8.0 – Remote Code Execution
This exploit has been tested against ELBA5 version 5.7.1 to 5.8.0. It can be used to remotely obtain code execution on the ELBA5 server with full SYSTEM level permissions. Additionally, a backdoor user can be added.
Mitigation:
Ensure that the ELBA5 server is running the latest version of the software and that all security patches are applied.