« Volver al listado

CVE-2015-1497

Estado: ModificadaAlta (10)—

radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Persistent Systems — Radia Client Automation

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-1497",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-02-16T15:59:10.463",
  "references": [
    {
      "url": "http://osvdb.org/show/osvdb/118382",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/130459/HP-Client-Automation-Command-Injection.html",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.exploit-db.com/exploits/36169",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.exploit-db.com/exploits/36206",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/72612",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-15-038/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.exploit-db.com/exploits/40491/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/show/osvdb/118382",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://packetstormsecurity.com/files/130459/HP-Client-Automation-Command-Injection.html",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.exploit-db.com/exploits/36169",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.exploit-db.com/exploits/36206",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/72612",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-15-038/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.exploit-db.com/exploits/40491/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465."
    },
    {
      "lang": "es",
      "value": "radexecd.exe en Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, y 9.1 permite a atacantes remotos ejecutar comandos arbitrarios a través de una solicitud manipulada al puerto TCP 3465."
    }
  ],
  "lastModified": "2026-06-17T00:22:31.967",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:persistent_systems:radia_client_automation:7.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "960F904F-15EA-42E7-98B0-65999AE863D4"
            },
            {
              "criteria": "cpe:2.3:a:persistent_systems:radia_client_automation:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA1AE679-42E9-41E1-BF2A-E25DD39BE191"
            },
            {
              "criteria": "cpe:2.3:a:persistent_systems:radia_client_automation:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BBFA3EC-88A9-4AD5-899B-35E50D2EB7A2"
            },
            {
              "criteria": "cpe:2.3:a:persistent_systems:radia_client_automation:9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "624A4445-8265-4E98-9BAA-06B10E4FECAD"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}