high7.3Public exploit code
CVE-2018-15657
An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SureMDM < 2018-11 Patch - Local / Remote File Inclusion2019-02-01 · webapps · windows
Impact
An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 42gears | Suremdm | before 2018-11-27 |
Weakness classification
References
- NVD record
- CVE.org record
- https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/
- https://www.exploit-db.com/exploits/46305/
- https://research.digitalinterruption.com/2019/01/31/multiple-vulnerabilities-found-in-mobile-device-management-software/
- https://www.exploit-db.com/exploits/46305/