header-logo
Suggest Exploit
vendor:
Cortex-A9
by:
Fidus Infosec
9.8
CVSS
CRITICAL
Remote Code Execution
78
CWE
Product Name: Cortex-A9
Affected Version From: ARM Cortex-A9 processor version prior to patch
Affected Version To: ARM Cortex-A9 processor version after patch
Patch Exists: YES
Related CWE: CVE-2018-5767
CPE: h:arm:cortex-a9
Metasploit: N/A
Other Scripts: N/A
Platforms Tested: None
2018

Remote Code Execution CVE-2018-5767

This exploit is related to the CVE-2018-5767 vulnerability which is a remote code execution vulnerability in the ARM Cortex-A9 processor. The exploit involves sending a malicious payload to the processor which then allows the attacker to gain access to the device and execute arbitrary code. The exploit code creates a listening socket on port REV_PORT and when a connection is accepted, it updates the global DONE flag to indicate successful exploitation. It then jumps into a loop whereby the user can send remote commands to the device, interacting with a spawned /bin/sh process.

Mitigation:

The best way to mitigate this vulnerability is to update the ARM Cortex-A9 processor to the latest version which contains the patch for this vulnerability.
Source

Exploit-DB raw data: