high7.5Public exploit code
CVE-2016-1543
The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BMC Server Automation RSCD Agent - NSH Remote Command Execution (Metasploit)2018-02-01 · remote · multiple · Verified
- BMC BladeLogic 8.3.00.64 - Remote Command Execution2018-01-26 · remote · multiple
Impact
The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bmc | Bladelogic Server Automation Console | Versions 8.2.02, 8.2.03, 8.2.04, 8.3.00, 8.3.01, 8.3.02 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/136462/BMC-Server-Automation-BSA-RSCD-Agent-Unauthorized-Password-Reset.html
- http://www.securityfocus.com/archive/1/537910/100/0/threaded
- https://selfservice.bmc.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000dBpnCAE&type=Solution
- https://www.exploit-db.com/exploits/43902/
- https://www.exploit-db.com/exploits/43939/
- https://www.insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/
- http://packetstormsecurity.com/files/136462/BMC-Server-Automation-BSA-RSCD-Agent-Unauthorized-Password-Reset.html
- http://www.securityfocus.com/archive/1/537910/100/0/threaded
- https://selfservice.bmc.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000dBpnCAE&type=Solution
- https://www.exploit-db.com/exploits/43902/
- https://www.exploit-db.com/exploits/43939/
- https://www.insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/