CVE-2020-8655

EyesOfNetwork Improper Privilege Management Vulnerability

Exploited in attacks High 7.8 Attack chance: 60%

What it is

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.

CISA: EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scripting Engine (NSE) script to nmap7.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: May 3, 2022

Added to the CISA list: November 3, 2021
Published: February 6, 2020
Severity: High 7.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 60% in the top 0.9% of all known vulnerabilities
Weakness: CWE-269
More details: NVD · CVE.org · CISA

All references (3)

More exploited flaws from EyesOfNetwork

Added	Vulnerability	Product	Severity	Attack chance
Nov 3, 2021	Use of Hard-Coded CredentialsCVE-2020-8657	EyesOfNetwork	Critical 9.8	92%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.